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iClip And 
Advanced UNIX 
Programming 


So guess what? 1 got a boat. OK, it’s relatively small 
as far as boats go, but it gets me from the shores of 
beautiful hake Anna to the islands, beaver clams, and 
fishing holes that dot this lovely retreat. PowerBook in 
hand, floating along, trailing my feet in the water. Ah, 
this is the life! 

Um, Dave, you are supposed to l)e writing a column. 
Oh, yes. As you can tell, I am on vacation this month. Rather 
than skipping this column entirely, I wanted to write about 
two really cool products I’ve been playing with lately. The 
first is a book, the second an innovative clipboard program. 

Advanced Programming 

l.aurie Anderson once said, “You know, I could write 
a book. And this book would be thick enough to stun an 
ox.” I believe she was talking about the brand new, 
second edition of W. Richard Stevens and Stephen A. 
Pago’s Adviinced Programming in the UNIX 
Environment. This is an amazing book. Yes, it is indeed 
thick enough to stun an ox. But even better, it is chock 
full of POSlX-compliant sample code that walks you 
through all manner of Unix programming technic|ues. 

You can download a tar file with all the source code and 
makefiles from ftp.uu.net. Login using anonymous FTl’ and 
grab the file publisheciA>ooks/stevens.advprog.tar.Z. I really 
love the .sample code in the book. I just wish the author 
thought enough of the Mac to provide an Xcode-savvy 
version of the sample ccxle. As is, you’ll need to do a bit of 
tweaking to gel the examples to compile using Xcode. Or 
you can just use the botik as reading material to get a sense 
of how Unix really works. Tliere is a lot here. That said, the 
authors clo di.scus.s Mac OS X and Darwin and have tested 
the book’s code on a Mac. 

The book starts off with a Unix System Overview, 
covering the basic architecture, logins, shells, files and 
directories, process control, threading, etc. The first .sample 
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proj»ram is a bare-bones implementation of the Is 
command. This is followed by a pair of file-copying 
pi'ograms, a simple program that prints its program ID, and 
a simple shell. This is all in chapter 1. 

Cliaptcr 2 features a terrific discussion of UNIX 
standardization and implementations. I found this 
chapter fascinating, with its discussion of the evolution 
of ISO C, IEEE Posix, through the Single UNIX 
Specification. 

There is just .sr? much richne.ss in this book. So much to 
learn. Wonderful information on file i/o, files and 
directories, process control, race conditions, v-node tables, 
job control, signals, etc., etc., etc. 

If you are interested in what makes UNIX tick, this I>ook 
is a niLi.st have. 

Addison-Wesley, $74.99, 

http://www.awprofessional.eom/title/0201433079 

Inventive iClip 

There are a number of products out there that I like to 
call “desktop information managers". They are not I’lMs 
(personal info managers), not cla,ssic databases. Instead, they 
live either on the desktofi or in the shadowy universe Ixdiind 
and lietwccn your mainstream applications. Classic example 
of this are I-aunch Bar 4 (http://www.obdev.at/ 
products/launch bar/}, Butler (http://www.petermaurer.de/ 
nasi.php?thema=butler&sprache=english), TigerLaunch 
(http://ranchero.com/tigertaunch/), and oh so many other 
utilities that firomise to organize your files and make it easier 
to launch your applicaiitins. 

Another category is the list managers, utilities that help 
you organize your data, allowing you to build collections of 
bookmarks, URLs, etc. It’s becoming a bit difficult to 
distinguish between all these products, as they are all 
becoming somewhat similar, borrowing features from each 
other. Umnehers let you launch URLs. Organizers let you 
organize files and launch them. 

It is a bit refreshing when an entirely original idea floats 
into view. iClip, from Inventive, is just such a creature. On 
the surface, iClip looks like just another clipboard 
management utility. You can drag data from your app to 
iClip’s main floating window, and the data is .storcci in a 
cell within the window. Want the data again, just drag it 
back out. 

The window can be formatted vertically or horizontally. 
Hover over one of the cells and a cartoon hall(x>n appears, 
showing a hit more det:iil about that data (see Figure 1). 
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Relational 

database 


Object-oriented 

development 


ABEnER DATABASE CAN SPEED 
UPYOURDEVElOPMElirCVCIE 


If your relational database isn't a good match 
for yoLir object-oriented dcvdopmcni, you need 
a new database. 

Cache, tlie post-rdational database from 
InlerSystcms, combines high-pertbrmance SQL 
for faster queries and an advanced object database 
lor rapidly storing and accessing objects. With 
Cache, no mapping is required between object 
and relational views of data. That means huge 
savings in both dc\'clopmcnl and processing time. 

Applications built on Cache are massively 
scalable and lightning last. They require little or 
no database administration. 

More than just a database system. Cache 
ineorporarcs a powerful Web applicatit>n develop¬ 


ment environment that dramatically reduces the 
rime to build and rntxlify applications. 

Cache is so reliable, it’s Uie world's leading 
database in healihcarc - and it ptywei-s enterprise 
applications in financial services, government and 
many other sectors. With its liigli reliability, high 
performance and low maintenance, Cache delivers 
your vision of a better database. 

Wc arc InicrSystems, a specialist in data man¬ 
agement tech logy for over twenty-six years. 

Wc provide 24x7 support to four million users in 
88 countries. Cacbe is available for Windows, 
Open VMS, MAC OS X, Linux, and major UNIX 
platforms - and it is deployed on systems ranging 
from two to over SO,000 simnltaiieoys users. 


InterSystems ^ 

CACHE 

Make Appitcations Faster 


Try a better database. Far free. 

Download a free, hilly functional, non-exptring copy of Cache or request it on CD at wwu In 11 iSvstems ct >m /match3 
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Figure 1. The iCIip window, with an info 
cartoon balloon showing a bit more detail. 

You can organize your clippings into sets and easily 
switch l>etwecn sets. Yes, yes, yes, this ail sounds familiar. 
We’ve seen this kind of organizer in many dif ferent forms 
over the years, from multi-clip to any one of the current crop 
of clipboard utilities. 

But. 

iClip offers one feature that really caught my eye. You 
can set iClip uf) as a clipboard recorder. In this mode, iCiip 
catches every single copy of data to the clipboard and adds 
that data to its own cell in the clipboard recorder window. 
Each time you copy, that data hangs around, even if you 
move between different applications. You can hide the iClip 
window and the clipboard gathering continues. Want to 
retrieve .something you copied a while back? Hit the iClip 
h(}t-key and Trsh your data from the clipboard recorder. Ah, 
good, it’s .still there! 

This might sound small, but I love this feature. There arc 
other products that track clipboard progress. I first like the 
way iClip docs it. Give it a try. You can download iCiip from 
the Inventive web site: 
http://inventive.us/iClip/ 

Until Next Month 

Next month. I’ll be back full force with my regular 
column. Until then, enjoy your summer. I’ll be here on the 
lake, counting the clouds. © 



About The Author 

Dave Uark is a hag-time Mat devehper and aalhor aad has 
written a mmAer of books oa Dtadatosh dev^t^aueat. Dave 
has been writiag for MatTetb siaie its birth! Be sure to <hed( 
out Me new learn C on the Macintodi, Mat OS X Cation at 
htip://www.sinderworks.fm. 


M/^cncH 

CdWMUHicoiVe WifU Us 


department E-M«i1s 

Orders, Circulation, & 
Customer Service 
c’ast_service@ m actcch . ajm 

Press Releases 
press_relcascs@mactedi.iuni 

Ad Sales 

adsales® mactcch. com 

EdtioriiU 

ed itoria 1@ mil cted i. com 

Online Support 

onlin c@ n la ctcchx’om 

AccotinUtig 

accou n I i iig® maclech . coni 

Marketing 

mark ct i ng @ niactec: h .cum 
General 

info© matlecli .com 
Web Site 

htfp://www.mactechxom 


In this electronic age, the art of 
communication has henimc tx)th 
easier and more coniplicaied. is it 
any surprise that we prefer e-mail? 

If you liave any questions, feel free to 
call us at 805/494-9797 or fax us at 
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6 July • 2005 


































Complete Sour€e Control 
and Defect Management 

for Ma< 


4Seapine Software" 

irbangitig thff uforid 




osx 




Effective source code control and defect tracking require powerful, 
flexible, and easy-to-use tools—Surround SCM and TestTrack Pro 


• Complete source code control with private 
workspaces, automatic merging, roie-based 
security, and more 

• Comprehensive defect management — track 
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• Fast and secure remote access to your source 
fiies and defects — work from anywhere 

• Advanced branching simplifies managing 
muitiple versions of your products 


• Link code changes with defects and change 
requests — know who changed what, when, 
and why 

• Scaiable and reliabie cross-platform, 
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QUIOKTIME TOOLKIT * by Tim Monroe 


Back To The Future, Part III 

Developing Applications with the 
QuickTime for Cocoa Kit 


I n the previous two QuickTime Toolkit articles (in MacTech, May and 
June 2005), we’ve taken a look at using QTKit, Apple’s new Cocoa 
framework for displaying and modifying QuickTime movies. We saw 
how to open and manipulate movies using command-line tools; 
then we stepped through the process of building a fairly complete 
document-based Cocoa application using QTKit. This application, which 
we called KitEez, supports the standard document-related behaviors, 
including saving an edited movie into its original file or into some other 
file, and reverting to the last saved version of a movie file. Since KitEez 
was built using the Cocoa class NSDocument, we didn’t need to write 
any code to track the edited state of the document window and its 
associated movie or to display the standard dialog boxes that warn the 
user about unsaved changes and overwriting existing files. 


Introduction 


In this article, we’ll take a look at a few 
more of the t^pabtlidcs offeRil m by 
QTKit, In particular, wc’II see how to add 
images iu an existing Quickl ime movie 
and work with notitlcations and delegates. 
We'll also see how to call Quick'!ime 
functitins that have no corresponding 
QTKit method and we’ll lake a second look 
at opening files and URLs. 


The image parameter of cotirstr specifies the image to add to the 
end of the movie, and the duration parameter is a QTTlme 
siniciure that specifics the desired duration of the new frame. 
Tlie attributes parameter is a dictionary that sjx'cifies the codec 
to be used to compress die image and |X*ssibly also the quality 
of the compressed image. For instance, Listing 1 shows a simple 
method that reads an image from the applicatiem’s nib file and 
adds it to the end of the movie, with a duration of one second. 


Co tack a few images onto the end of die movie. Tlie QTMovie 
class provides a meduxl that makes tliis exiRmiely easy, 
add I m age :forDu ration with Attributes, whose signiuure is diLs: 



forDuratlon;(QTTlrae )duration 
withAttribiJtef!: ENSDictiouary *) attrlbuttjs; 


Adding Images 
to a Movie 


Adding Images to an 
Existing Movie 


Listing 1; Appending an image to a movie 


(void)addImag&FromMibFile: {HSString Uname 


Imagine that we ve opened a 
Quick'fime movie from a file and we’d like 


1 

'image [NSImage imagaNamedtnama] t 
QTTime duration = OTMakfiTimetCOO, 600): 
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NS&ictionary 'diet • [NSDictionary dietIonaryWithObjoet: 
QTStrin&ForOSTypeC * pxlt") forKey:QTAddlmagcCodecTypel 


I 


l_niovle addimage: Image forPurationrduration 

wlthAitributes:diet]: 


As you on see, itic diet tliaionary’ contains one key-value 
pair, where the key is QTAddImageCodecType. This key spccilies 
the codec to Ix* used to compress the image l^efore it’s added to 
the movie* Notice that we have used the function 
QTStringForOSType to convert a codec OSType (liere, for the 
Pixlel compressor) to an NSString objea. Q'rKii also provides a 
utility function for going in the opposite direction: 
QTOSTypeForString will return an OSType corresponding to a 
given NSString. 

The ditlionary of attributes can also contain a key-value 
pair in which the key is QTAddlmageCodecQuality. If this pair is 
present, then the specified value, which should lx an 
NSNumber, is used as the quality setting for the compressor, Tliis 
key-value pair is 0 [)iional; if it is not included in the dictionary, 
the quality setting codecNormalQuality Ls used. The accepialile 
values are li,sred in this enumeration in the header file 
(mageCompression.h in the framework QuickTime.framework; 


Future vemions of Ql’Kit will almost certainly provide 
one or more new methods in QTMovie to create a new 
empty QTOIovIe object that is associated with a writable 
file or bkx:k of memory* In the meantime, it is possible to 
work around this limitation by creating a new empty file 
and associating it with a new QTMovie objeci using tlie 
movieWithQuickTimeMovie:disposeWhenDone:error: 
meiliod, as shown in Listing 2. As you can see, we use the 
movie slorjgc APIs Cdi,Hcussed in "Modern Times” tn 
M:icTtxh, May, 2004) to create a new empty movie hie. 

listing 2 : Creating a new empty movie 

that is writable 

- CQTMovie)inoviGWlthWrilabl€*Flle: (tJSStxing ’ifileuaMe 
handler;{DataHaudier 

^)datuH£iudlec 

t 

OSHrr err ^ DoErr; 

Handle dataRef “ nil; 

OSType dataRefType; 

Movie qtMovie ^ NULL* 

QTHovle »ovie = nil: 

// makr sur-^ we arc passed a location to rcCLirn tlic data liaiidlcr 
identifier 

if {IdataHandler} return nil: 


enum ( 

c odec L 1 e s a (3 ual i t y 

codecHaxQuallty 
codecMinCiuality 
codeciovQuaiity 
code c No rmaiQua1it y 
codecHighQuality 


Adding Images to a New Movie 

vSuppose that instead of adding an image to the end of an 
existing movie, we want to create a slideshow movie from some 
images, staning this time from an empty movie. You might think 
tliat we could first create a new, empty QTMovie objea and then 
tack on the images, like this: 

aTHovle 'Miovle “ [fQTMcvie alloc] Init]: 

[movie addIiiiageFroniNibFile:(^’'A, jpg*’] ; 

[movie addlmngsFromN(hFilo:@"B, jpg"] ; 

// ai’Etl so forth... 


// create a file data reference for the s[>cdriaf filename 
etr “ QTIflewEataRufercnceFroroFullFathCFStringf 
(CFSt ringRef]fil eName, 
kQTNativeDefaultPathStyle, 

0, ^dataRef, &dataRefType); 
if [err 1= noErr) return nil: 

// CR-ate a QuickTlinc movie froni the file data reference 
err “ CreateMovieStorage(dataRef, dataRefType, 
‘TVOD', 

smSy 81 (j«S e t ip t, n ewMo vi eA c t i ve, 
da t alland 1 e r, & qtMov i e); 

If (err !- noErrJ return nil: 

// imtantiate a QTOovic fmm the QuickTime movie 
movie = [QTMovie movieWithQnlckTjticMovlGtqtWovle 
disposeWhenDono;YES etrorinll]; 

// mark ihc movie as editable 

fniovie setAttribute; [NSNumber numberWithBool;YES] 
f ox Key:QTMo vieEd11 ab1eAtt ribut e1; 

return movie: 

1 


“ 0x00000400, 

- OxOOOOOlFF, 

- 0x00000000, 
= OxQOOOOlOO. 

- 0x00000200. 

- 0x00000300 


In fact, however, this wtxjid fail* The underlying reason is that a 
new QTMovie object created in this way has no writable data 
reference associated with it. In layman's tenm, iliis means iliai 
the assiKialcd QuickTime Movie has not yet been assigned a 
place to store any new media dam that is added to the movie. 
Since there is no place to write the media data, tlie call u> 
a(idlmage:forDuration:wilhAlfribules fails. 

You niiglil tliink tliat iJiLs is a twig in QTMovies init method, 
which atuld easily assign a block of data in fnemt^ry as the writable 
data reference for a new QTMovie objea. But that revised loehavior 
would lead to problems of its own. Ft)r instance, adding a number 
of large iiruiges could soon fill up the available physical memory or 
at Icaja put the virtual memory sy’Stem into severe thrashing. 


We ncx'd to return to the c:aller btHh the new QTMovie 
object and the identifiCT of die data handler asscxrtated 
with the open movie fde. Thafs tiecause, when we are 
finished adding frames to the movie and have called 
updateMovieRle, we need to call CloseMovieStorage to 
close the movie: 

CloseM&vieStoraaefdataHandler); 

Creating a Movie from a Single Image 

Ifs worth mentioning one further twist on this issue, 
namely using QTKit to create a movie from a single 
image. Suppose we want to create a lO-second movie 
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from a single image. We could use the strategy employed in the 
previous seaion, first creating a new empty movie file and tlten 
adding the specified image to its associated QTMovie object. But 
there Is in fact a much simpler way to do this, using the 
dataReferenceWithReferenceToDala:name:MIMEType: metliod in 
the QTDataReference class, tn a nulshelf this method creates a 
data reference to some block of memory addressed using an 
NSData object and optionally attaches a filenaming extension or 
a data reference extension of type 'mime' to the data reference. 
As wc have seen in earlier articles (particukrly in “Somewhere 
rll Find You^ in M^wTeeb, Oaober, 2000), these extensioas help 
Quicklime find the appropriate movie or grapliics importer 
when a data reference is to a block of memory. 

In the present case, we’ll create an NSData object itial 
contains a TIFF representation of the im:ige and then create a 
QTDataReference object that has, as its filenaming extension, an 
arliitrary name with the extension lift. Listing 3 shows the cr>de 
we can use to do this. 

listing 3: Creating a movie 
from a single image 

’ (voldJcreateHovleFileFronilniage: (HSString *)filena4iie 


if C! filename || I image] 
return; 

NSData *data - [Image TIFFRepresentation]; 

CjTDataReference ’dataRef “ [QTDataReference 

da t a K e f e r enc eWit bRe f e r en c eT oDa t a:da t a 
narrte£@“so(iie_itiiage.tiff” MIHEType:nil] : 

QTHovle ‘movie = [QTHovle JiiovieWitbDataReference:dataRef 
ecror:nii]: 

// make the movie editable 

[movie aetAttcibute:[HSNumber numberWithBooliYES] 
for Key:QTMoviaBditableAt t ribute J : 

// m the duration to 10 seconds 

QTTimeRange range ” QTHakeTiraeRange(QT2eri>Tijna, 

[movie durationl); 

[movie scaleSegmentgrange ttewDuration:QTHakeTlme(lO, 1)1; 

// export as a 5gpp file 
NSDictlonary 'dict= [NSDictionary 

d let i evna ryUithObject: [NSNumber numberWithBool: YES) 

forKeyiOTKovleFlattenl: 

[movie writeToFile: fllenanie withAttributea:dictI: 

I 

Tliis works l^ecause we are not actually editing the movie's 
media data. Instead, we are creating a QTMovie objecL that gels its 
media data fmm the NSDala [)kx:k. We ate editing tlie movie when 
we call the scaleSegmentinewDuration: method, but that’s okay 
even wlien the movie does not have a writable data reference. 


QuickTime Functions 

Even though Ql'Kit exposes a fairly large numlx^r t>f classes 
and methods, and even though it does quite a bit of movie- 
related prtKessing automatically, it's fairly likely that we will 
want to use Quickl’ime capabilities that it does not currently 
support. For instance, we've already seen dial QTKit does not 


yet provide a method for creating a new, empty movie tliat lias 
a writal>Ie data referenc:e associated with it. So we used the 
underlying QuickTime APIs to create one, which we then used 
to initialize a QTMovie object. It can also happen ilmt weVc 
already got a QTMovie ol>je<1 and we want to perform some 
operation not yet supiwrted by QTKit. In this case, the QTMovie 
class provides two useful methtKls that allow us to retrieve tlie 
Movie and MoveController identifiers as^sociated with a 
QTMovie object; 

- (Movie) quicKTimeMovie; 

- (MovieController) quickTl ra<iMf>vleController: 

Suppose, for example, that we want to set the 
magnification {or "zoom") level of a Flash movie. We can do 
so by using the quicklime Movie method to retrieve the 
QuickTime Movie associated with a QTMovie object and then 
using Movie Toolbox and Flash media handler functions, as 
shown in Listing 4. 

Listing 4: Setting the zoom level of a Flash 
movie 

■ (void) SGtZoom: (float) zooBlPct 

I 

Track flashTrack = NULL; 

Media flasliMedla - NULL: 

HediaUantiler flashilandlGr * NULL* 

flashTrack “ GetMcivieIndTraGkType( [self qaickTltiJeMovlG], 
t. FlaflhMediaType, movieTrackHedEaType | 
moviaTrackEnabledOnly); 
if CflasbTrack) I 

flashHedia - GGtTrflckHedia(flaabTrack): 
flasiiHandler ^ GelHpd i aHandl GrfflashHedia); 
FlashHediaSetZooiitflashUandler. zooinPct); 

) 

) 

In general, it should lx? sjife to oil vinually any QuickTime 
functions on tlie Movie or tlie MoveControlter associated wfth a 
QTMovie o[)jcct. Some 0 [>enitions, however, might not be safe and 
slKXild prdBbly i)e avoided. In fxirtiailar, (J'rKii generally assumes 
that it will be disposing of ilie Movie and MovieContnallef assodatai 
with a QTMovie object, so you should not cull DisposeMovie or 
DisposeMovieController. (The exception to this mle is when you pass 
the value YES as the disposeWhenDone paranicter in QTMovie's 
rnovieWithQuickTimeMovie:disposeWhenDone:errDr: method, which 
tells QTKit tliat you want to dispose of the mt)vie yourself.) Also, 
deleting tracks from a movie using the Mt>vie TotIIxjx function 
Di^xiseMovieTrack is likely to conl’u.se QTKil and may even lead to 
crashes. It’s likely that QTKit will in hiture veP>ioas add medaxls 
tlial provide a way to delete tracks, since this Is a reasonably 
common opemkKi for some kinds t)f applications. 

Notifications and Delegate 
Methods 

As you no doubt already know, a notsfiattkm is a way for 
one Cocoa objea to inform other objects alK>ut changes in its 
state or its properties. The QTMovie class defines a large mimlier 
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of notificatioii-s that ocher objects can llsien for; here are tlic 
mrtificatioas that are currently defined: 

NSStting *QTMovleEdltabliityDldChafigeNotificat1on: 

NS S t r ing * QTMt? v 1 e Ed 11 t^dNo t i f ic all on; 

NS St ring ‘QTHov i eioadStateDidChangeNot1fica llon: 

NSString "(JTHovleLoopModeDidChatigeMot i fIcatlon; 

NSSt rin g * QTMo vieM e s s a geS t rin gPos t edNo tifica tion: 

NSString * QlTIovie E at e Did Chan geNo Lifleation; 

NSSlritig *qTMovieSelectionOidChatigeNotitication: 

NSString ‘QTHovleSizeDidChangeNotificatlon; 

NSString 'QINovleStatuuStringPostedNotificatIon; 

KS S t ring * QTHo v1eTIrae Did Chan geKotif1catio n : 

NSString * QTMov1eVolumeDidChangeMotif1rat ion; 

NSString •qTMovieDidEiidNotification; 

NSString •QTMovieChapterDidChangoNotificatlqn: 

NSString 'Q'l’MovieChapterLlatDtdChangeNotifiration: 

NSString ‘QTHovieEnterFn 11 ScreeiiEequestNo11 fication; 

NSString ‘QTHovieExUFullScreenRequestNotlficatlon; 

NSString ’QTKoviRCloseWlndowReqiiiestNotlficatl on; 

Most of these are fairly obvious. For instance, 
QTMovieDidEndNotir»ca(ion is postctl when a QTMovie objea 
reaches its end. And QTMovieEdrtedNotificalion is posted when a 
QTMovie olijett has been edited or c‘hanged in some way. A Few 
of these are however somewliai less obvious. The 
QTMovieTtmeDtdChangeNotification notification is not, for 
instance, posted whenever the mcwie time changes; rather, it's 
posted whenever the movie time changes to a value different 
from what it would be during normal niovie playback. These 
soas of time cMnges include openations like the user clicking in 
the niovie cxmrroller bar to change the movie lime or a wired 
action setting liie movie lime to some spc'cific time. 

in most cases, tliese notifications are posted using the 
NSNotificalionCenter method postNotificationName:object:, where 
no accompanying userinto dictionary is pa.ssed. The 
expectation Ls that the notification listener will be able to 
reirieve w^hatever information about the QTMovie olrjeci is 
needed at the time the notification is received, So, for instance, 
a listener receiving tfie QTMovieVolumeDidChangeNotification 
notification could call the QTMovie method volume to retrieve 
the curreni volume of the movie. In three cases, however, a 
dictionary c^f information is passed along with the notification, 
Ijccausu there is no easy way for the receiver lu ask for that 
information; these are: 

QTMov 1 eMe s s a geSt rin gP ostedNotIf1c a cion 
QTHovieRateDidChangd^otifical ion 
Q'PHovieStatusStriitgPnstedNotiflcarioi: 

WeVe already seen an example of registering for 
notifications in the previous article. When we initialize a movie 
view to hold a movie, we want the asscK:iated document to fx: 
informed of any size changes chat occur programmatically or via 
wired actions; we did that by registering for the 
QTMovieSizeOidChangeNotification notification, like this: 

I fNSNotif IcationCent^r def atiltCentet] addObe^rver teelf 
selector:@Belector(boundsDidChange:) 
riaine:QT!1ovieSiKeDidCbang«Notification objfjci::iiiovi€j : 

Listing 5 shows our itTiplementation of tlie boundsDidChange: 
metluxJ, which is invoked wlien we receive tliis notification* 


Listing 5: Handling size-changed 
notifications 

{void)boundsDidChange:(NSNotlficatlon 'Inotificatlon 
t 

// set the size of the movie window to exactly enclose ttie movie at tLs 
cunent size 

NSSize size “ [[ [movieViev movie] attributeForKey: 

QTMovloCurreritSiKeAttribute! eizeValue] i 

[ImovieView windowl a«>tContentSize: 

[self wiiida¥ContentSlzeFt>rMfivieSlze;si3eJJ: 


Nolifit'ations provide a very loose sort of coupling lx.iween 
objects in Qxroa. One objea posts a notification and one or 
more other objecLs can listen for that notifiotion and respond 
appropriately. By contrast, a muf:h tighter association of two 
objects can be formed by designating one of them as the 
de/egafe of the other. Currently QTKW defines (miy five public 
delegate methods, all in the QTMovie class, of which only three 
are likely lo Ixt of use to developers: 

- (BOQDmovieaaTHovle *)mQvie 1 inkToURL:(NStJRL *)url; 

- (QTMovie ') exteroaiWovie: (NSDIctlotiary *)dictionary; 

- (BOOL)movie: (QTMovie *)movie 

shoiiIdConiinueOperatioii: (NSString ’lop 
vi thPbase: (QTMovieOperatiotiiPhafleTphase 
at Per cent: (NSNmnber *J percent 
wtthAttributes:(NSDictlonary *)attributes: 

A delegate's movieilinkloURL: mctiiod is called when the 
movie controller Ls almut to open a movie specified by a 
URL* (This corresponds to the movie controller processing 
an mcActionLinkToURL action in the Carbon world.) For most 
applications, the QTKit's normal processing of LJRLs is fine 
for most applications; you would define this delegate 
method if you wanted lo reroute URLs to some other 
location or cancel URL opening altogether (by recurniiig 
NO). 

A delegate's external Movie: method is called when the 
movie controller needs to find a movie external to some 
given movie, most ofien lo send that other movie a wired 
action. Once again, QTKit contains code to find external 
movies and most applications can rely on that automatic 
processing. 

The only QTMovie dclegam method likely to Ix^ defined by 
applicatitms is iTtovie:sbouldC5ontinueOperation:withPhase:atPercent: 
withAttributes:, whidi provides a CJocoa wraf>per for a movie 
pnjgness pax:edure. Currently liiis is useful only when calling the 
writeToFile:withAHributes method, liiough it's possi[:>le thii itKjre 
opemtioas hi QTMovie wiQ support tliis deleg^ite method in tlie 
future. 

Opening Movies 

In our first QTKii article (mentioned earlier), we opened a 
movie specified by a filename using the intlWltbFile:error: 
method, like tliis: 

QTMovie 'movie = [QTMovie initWithFile:filename etror:nil]: 
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We can ali^o t>pcn a movie specified by a LtHL using the 
initWiihURLerror: method, like this: 

QTMovle *tflOYie = [QTMovie 1nltWlthURL:url error:nlll : 

It’s useful to know that tiiere is a more general mcthixl for 
oix^ning movies wtiich offers several advantages over these 
methods, namely initWithAttributesierrorL The following lines of 
code do exactly the same thing as the line of ccKle that uses 
lnitWithFile:error: aliove. 

NSDJctlonary Mict ” [NSDictioti^ry dictlOEaryWlthObject: 

f1lename forKey:QTMovi gFI 1eNameAttributel 
QTHovie *movie [QTHovie itiitWitMttributes:diet 

er rt>r;nlU i 

'fhe idea is that we pass into initWithAttributes:error: a 
diclitmary containing one or more key-value pairs dial specify 
the attribute-s we want the new QTMovie tibiect to have. One of 
chose anrifiutc-s must specify the location of die movie data, 
either via a filename or a URL or a QTDataReference object or a 
pastelx)ard or an NSData block. But there can Ik: an indefinite 
number of other attributes in that diciiunary, which are applied 
to the movie object before ifs returned to the c-aller For 
insUmce, we can ensure that all movies we open are editable l^y 
creating the dictionary like this: 

diet * [KSDictloniiry dictionaryWithObjectaAndKcys: 
f i 1 en ame. QTHov i e Fil eHa At t r i but e » 

iNSNatnber numberWithBoql: YKSJ p QTHovieEdlitableAltributep 
nil] : 

The initWithAttributesierror; method is not merely a 
convenience that saves us from setting attributes on the QTMovie 
object returned by emails to initWithFileierror: ur initWithURLieiror:. 
There are at least two imponani reasons wc might need to call 
it ratlier than chose other melhocls. First, we can pass in 
attributes that override some of the default behavioi's of Q'l Kit 
when opening movies. For example, we learned in an earlier 
article that Q'FKit opens all movies asynchronously. (Tliat is, a 
c'all to initWrthURL:error: returns almost immediately, so that the 
application can continue with its processing while the movie 
data loads.) But it's possible that an appliaifion would want to 
load movies synchronously. In that case, if could construct an 
attributes dictionary like this; 

diet “ [NSDictlonary dictiunaryWlthObjectr.AndKeys: 
url * QTMovleliRt^ttribute * 

fHSNumber ntimberWlThBool :NOj, QTHovleOpeTiAeyncOK At tribute, 
uill: 

Setting NO as the value of the QTMovieOpenAsyncOKAttribute 
attribute indic'ales that we want llie movie to l>e oixfued 
synclironously. Obviously, this atuibute needs to Ik* set iK^forc 
we start opening the remote jiiovie, and initWithAttributesrerror: is 
the only way to do that using QTKir methods. 

The sc'cund case in which ilvis method is srimetimes 
necessary is to set a delegate for the QTMovie object being 
created so that that delegate is operational during the movie 
loading. In particular, it’s quite possible that an 
mcActionLinkToURL action is encountered by the movie 


controller before the initWithURLisrror: method returas to the 
aUler. So this scKiuence of calls might not work if the delegate 

needs to handle all link-to-lIRL actions: 

QTNcjvle * movie = [tyrUavle inltVithURL:uri error: nil] ; 

[movie setOelegateirelf] ; 

Instead, we can call inilWithAltributesrerror:, adding the 
QTMovieDelegaleAltribyte and its associated object to the 
dictionary of attributes: 

diet " iNSDictionary dletionaryWlthObjectsAndXeyG: 
url* QTHovieURLAitribute* 
self, QTHovietleleaateAttribute, 
nil]; 

QTHovie *movie - [QTMovie iiiltWI thAttributefirdict 

errorinil]; 

By setting Lhe delegate in this way, we can guarantee that all 
link-to-URL aaions wall l>e sc^n by the movie :linkToURL: 
delegate metliod. 

If your application does not neetl to usi* any of the delegate 
methods defined in the QTMovie clas.s and if it does not need to 
override any of the default behaviors provided by QTMovie, then 
the initWithFtle:error: and tnitWithURL:error: methtKls are just fine. 

Conclusion 

'Ihls anicle and the previous two articles should hclf) 
convince you lliat Q'fKit is a f)owerful fnimework that allows 
you to develop robust QuickTime applications with a minimum 
of axJe. QTKil provides the most comfireheiisive set of builirin 
CTtpabilities and the most compleie auttjinatic prex^essing of any 
Quickl'ime framework that I have yet encouniered. It's easy to 
use, it dovetails nicely with existing Coccxi frameworks, and it's 
already si^rving as the Quick'I irne imdcrjxjinings of poweri'ul in- 
liousc' and commercial muliimcdiii applications. 

In the next article, well take one more look at QlXit, Lt) 
investigate how to execute QTKit meiluKis on a secxjndary 
thread. Hiat will give us the machinery we need to perform 
coinputationally intensive o|>enuions (like exporting large 
triovies or creating slideshow movies from a large number of 
images) without negatively impaaing the responsiveness of the 
ap[)lication’s user interface. 
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Introduction 
to Core Data 

Using Tiger's New Persistence 


Framework and 


Introduction 

Tliis our secx)nd article on tlic new Cocoa technologies 
available wiili the release of Tiger In the last installment, we 
focused on the new tree-based XML parseNSXML. Tliis month 
and in future articles, well 1^ delving into Cure Data. In order 
to l>etter understand what Coa; Data is and wliere it came frmn, 
a bit of history is in order 

Way back in the day, NeXT had a wonderful something 
called EOF; the Fnterprise Obfc^cts Framework, EOF was not just 
a framework , but also a tcx)l (called HOMcKleler) that allowed 
you to create your application's data model visually instead of 
manually creating objeclive-C classes. Even though your data 
model was not made by writing code, you could interact wiili 
your data as objective-C objects by using key-value ctxling- the 
framework handled all the work involved in |x?rsisting the data 
to a SQL database, flat file, or any other data store for which 
somebody wanted to write an EOAdaptor, You rarely hud to 
write a single line of SQL or file management code in order to 
make your program work^ all that iiafjpened for free. 

HOF allowed onl^-lievable developer produaivity in bttlh 
creating and maintaining applications. And due to its object- 
oriented architecture, it offered limitless flexibility becjiuse you 
could always opt to write your own classes to override or 
supplement the functionality you got for “free" by using it. 
While a version of EOF still exists in Wel>01>jects (EOF/WO), it 
is Java based and not available nor licensed for use Ln regular 
Cocoa applications. The objective-C version still exists and is 
installed with WebObjects, but tFs not atriively supported and 
the adaptors have not been kept up to date. 


Modeling Tool 


By Jeff LaMarche 


With the release of Tiger and Core Data, EOF has risen from 
the dead... sort oL 

The More Things Change... 

Apple's own dtx:umcntation states that Core Data and 
EOF/WO share a common heritage. Despite tltat, they are 
clearly intended for different purposes. EOF/WO Is used almtxst 
exclusively for writing datalyase-hacked web applications. 

Core Data, on the hand, was specifically designed 
without support for remote databases; it is intended (at least 
for now) just lo provide kKat data storage for Cocoa 
applimiions. Lack of support for remote databases, in the eyes 
of many developers, is a significant limitation. Despite that, 
Core Data does what it was designed to do admirably well. Jn 
some ways, Core Data is better than FOR The modeling 
fiinctionaliiy is much more pnlLshed than what EOModeier 
offered and it’s integrated right inU) XCode, so there’s no need 
to switch back and forth l>ctween the IDE and modeller. Core 
Data’s limited storage options also simplify things; tlie built-in 
storage options- which include storing data as XML, in binary 
files, or in an emlx^ddcd SQLite database- means no more 
hassles finding the EOAdaptor you need or making sure your 
users have the correct adaptors (and version) installed on 
their machines. 

Combined with Cocoa Bindings, which were added wjtli 
Panther, Core Data is nothing short of miraculous in terms of the 
inerease in developer produaivity it affords you. 
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Overview and Terminology 

'Ilie test way to sliow Ikiw wonderful Core Data Is, is m just 
dive in and use it. teforu wc do that, however, let's take a 
second lo go over some tesic terminology. 

Entity — this is the highesi level t)l)ject in a Ccjre Data dati mtxlel. 
Entities generally corresiionds to tlic Gxxja classes uuditionally 
used lo hold dam. They am hold dam directly by way of their 
attributes and by incx)rporating other entities using fekUionshijts 
‘And fetched properties, Prograinmaikiilly, entities are most often 
represented liy ihe NSManagedObject class, but cm also te 
represented by custom subclasses of NSManagedOhjecl. Entities 
on be abstract and Core Data supports a aidiinentary form of 
inlterimnce among entities. Tliis functionality is beyond the 
scope of this article, and (at ieitst in the days of EOF) was seldom 
used in praake. In faa, at one lime, the use of entity inheritance 
was disc<Hiraged in Apple's official dcK.umeniation, 

Attribute - an atirilmte is a propeny of an entity that holds data. 
Atml)uies roughly correspond lo the instance variables of a 
traditional data mcxlel class excluding collections such as 
NSArray and instance variables tliat are tlieinselves also 
custom dam model classes. There are a limited number of 
attribute types, such as strings, a few types of numbers, dares 
and a few oiliers. Attributes are represented in code by the 
class NSAttributeDescilption. 

Relatioiiship - a relationship ts Core I>atas primary way of 
making one entity act as part of another entity. Rebtionships 
am te one-toone—which is analogous lo declaring an instance 
of one clam mixlel class as a varialijle of anmher ctass^r they 
can be one-to-inaiiy, which parallels the use of an NSArray 
instance vaitible. You use tlie NSRelationshipDescription to 
interact witli relationships in your code. 

Fetched Property - fetched properties are similar to 
relationships in that Fetched Properties allow fjbjects to 
behave as if tliey are part of another object. The key difference 
is that while relationships tie .specific entity instances to 
anotJier entity, Fetched Proi^erties incorporate entities based 
on specified criteria, very much like the mle-i>ased “smaif’ 
functionality that 1ms popped up In so many places lately: 
smart playlists in mines, smart maillx>xes in Mail, smart photo 
albums in iPhoio, etc. NSFetchedPropertyDesciiption is the 
Cocoa class used to represeoi fetched properties. 

Ihe term ‘‘property’' is used generically to refer lo all items that 
can be contained with an entity: fetched properties, 
relationships, and attributes. Emilies and the three types of 
pi‘ 0 (>eities make up the actual Core Data dua model. Here are a 
few more Core Data terms and classes with whicli you should 
lx: familiar before we get our feel, wet: 

Context - tlie “exantexf is the virtual space in which data is stoned 
and corresponds to the physicjl data store on your local liard 


drive. For a Cbre Data application, you’ll typically only have 
one context, diough you could iiave more. WMiin a Core Data 
Document-Based application, you 11 typically have a sepaiate 
context for eadi open dfxiiment. In Core Data, die context is 
represented by the NSManagedObjeciContext class, 

Pfedicates - die aLsicsi way to tliink of a predicate is to think of 
it as a "rule'’, in die sense of smart playlists. An example of a 
predic'aie, rendered in English, would te ‘'name begins with 
‘A’" or “price k less than $20", The NSPredicate class and its rwo 
subclasses, NSCompoundPredicate and NSComparisonPredicale 
repteseni predicates in code. Predicates can be compounded 
using tlie logrtral operators and, or, and not. 

Fetch Request - this is how you retrieve entities from the 
context. Fetch requests can be unqualified, in which case 
they will return all instances of a specific entity, or they can 
be qualified using predicates. Fetch Requests are 
represented by the NSFetchRequest class. You can also 
retrieve data from the context by using NSArrayConlrollers, 
which well do later in this article. 

Creating the Data Model 

You may remember in die NSXML arrieJe, we created a 
class t'alled MTBook to store the data we retrieved from 
Amtizon's XML-based web service. T’oelay, we’re going to 
recreate that data model widiout writing a single line of code. 
Open up XCode and create a new projeci using the Core Data 
Application template and call it MTCoreData. 

If you open up the Models folder in your projea, you will 
see that there is already a model file called 
MTCoreData DataModel.xcdatamodel, Click it, and it shtiuld bring 
up the Core Data model editor (if not, click the Editor icon in 
your i<x>l[>ar). There are four sections io die editor (figure 1). 



Figure 1. Blank Core Data Editor 
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This is ilie list of entities in your data model ‘ITie plus si^^n 
iti die lower left^ next to the scroll will add an eniity, which 
can be edited in section 3* The minus sign will allows you to 
delete entities, and the triangle next to the minus sign will allow 
you to change the view from a flat list to a hierarchic:aj display. 

this is the list of all the properties fur the entity currently 
selected in .section 1. The plus sign in the lower left ahows you 
io add a new relationship, attribute, or fetched properly. The 
minus sign will delete the currently selected property, and tlie 
triangle next to it will present a drop dt>wn Uiat allows you to 
niter tlie property display based on type. 

Ihis is where the selected entity or properly can lie edited. 
If an entity is selected, but no propeny is, then tliis area will 
display the editable tniits of the entity. If Ixith an entity and a 
property are selected, then the editable traits of the projK'ity will 
be displayed liere. 

This is die objea graph: a visual display of the data motlel. 
You can also edit many of die entity and property traits right in 
the object graph display if you want. 

Go aliead and dick on the plus sign in the lower left oi 
section L This will add and select a new entity called Entity. The 
naming convention for entities is that they start wiili a capital, 
foQowed by lowercase letters except you capitalize the first letter 
of any new word (e.g. FaxMachine). Eniities should be named as 
singular, not plural (not FaxMachtnes). Go ahrad and change the 
name of the entity to Book. We don't need to call it MTBook 
because entity names only have to lie unique witliin the data 
model, so there's no chance for a name confiiti as there is witli 
objeaive-C classc*s. Leave tlie class as NSManagedObject; well 
get into custom classes in a future aniclc, but fur now, leave rt ai 
the default value. We also wtm't lie specifying a parent or 
making it abstract, so we are dune with editing this entity. 

Now, click on die plus sign at the lower left of die piO]>erties 
section and add an attribute ctilled isbn. The naming convention 
for properties is the same as for objective-C instance variables: 
lowercase letters except where a new word starts (e.g, 
faxMachine). Unclick the optional checklxix - we want Core l^ata 
U) require this field, but Icxive transient unchecked (transient 
properties do not get saved to the data stone; diis can Ik^ used for 
temporary or calculated properties, but aa^ not commonly used 
without also creating a aisioiu sulKlass of NSManagedObject). 

Set the attribute’s type to String. You'll notice that you gel 
.some new fields after changing the type. These allow you to do 
some validation without writing code. ISBN numbers must l>e 
ten cliaraciers, so we could set die minimum and maximum 
lengths both to tO, which would cause Core Data to rejea input 
tliat is shorter or longer tlian ten characiers. We won’t do that, 
however, Im^ause there’s another way to validate this input. We 
can also give the aLtributc a default value. Wc won't do that 
here, but we will for other attributes. 

That knaves just one field; Reg. Ex., which stands for 
"regular expression/ If you’re not familiar with regular 
expre.ssiQns, it's well worth your time as a programmer to learn 
them; they often allow you to do a lot of work by writing a 
single, very compact string. They are also the key to using a 


numl.ier of the powerful cominand line tools that shi[> with OS 
X, such as grep, awk, and sed, not to mention die programming 
language Perl. 

Tlie reason we don't need to set a minimum or nuuinium 
length is because wc can enforce that with a neguUir expression. 
ISBN values not only have to be 10 cluiracters long, but the first 
nine characters must be numlicrs, and the final charjcter must 
l:ie a number or the letter X. Sure, we could write a half-dozen 
lines of code to enforc'e this, if we were creating a subekss of 
NSManagedObject, but the Reg. Ex. field gives us a way to do diis 
wiihout writing any code. We can make Core Data validate the 
entered value by simply typing the value \d{9}{\dXx] into the Reg. 
Ex. field. A regular expression tutorial is w^ay beyiind the scope 
of this ankle but, brielly, this string says that a valid input must 
have nine numeric digits foQowed by eiilicr another digit or an 
upper or loweraise x. 

Add another siring attribute called title, Give it a default 
value of Untitled Book and unclick optional. Also add string 
aiiriliuies called publisher and comment, l>oth of which cau lyc 
optional and have no default values. You can spec'ify a minimum 
or maximum length if you want, but IVe left them blank. 

Core Data has no entity type corresponding to a URL, so 
we’ll al.so use a string to store the Ixxik's URL. Create anodier 
string anribuie c:allcxl urt, make it optional with no minimum or 
maximum lenglli. 

Next, we need to hold two dates: dateReleased and dateRead. 
so add two more atiribul.es and give them the type of Date. Don’t 
worry alx>iit giving a mininium, imximum f)r default value. 

In MTBook. our variable salesRank was an int. In Cx)re Data, 
there are a few diffemnt (rpiions for storing integers, the only 
difference among them is die amount of memory they use. Sinc’e 
Am:i7on sales rank.s can be very big numliers, create a new 
entiiy called salesRank anti use an Integer 32 for the type. This 
ain l->e optional, and we need no maximum or default value. We 
will pul a minimum value of 0, however, since sales ranks have 
lo lie ptisUive. 

We also stored the cover image in MTBook as an NSData. 
Cure Data does not have an image type, but it does have a type 
called Binary Data which can liokl just alx^ut any type of data, 
much like NSData. so add another attribute oiled cover Image 
and assign it a type of Binary Data. 

Well, that takes care of everything except authors. In the 
hook infonnation returned from Amazon, a .single btxik can 
have multiple authors. We c-an represent this in Q>re Data by 
creating anrylhcr entity and using relationships to link our two 
entities. Add a new entity chilled Author, again not aKsiract and 
witli no parent entity. We only need to track one piece of 
infiirmation about an author—his or tier name— so atid a new 
entity lo Author and c'all it name. Set die tyi>e to String and 
undiek optional. Next, we need to create a relationship lx:tween 
die Author entity we just created and the Book entiiy, which we 
can do by adding a relationship to Author and calling it books. 
Unclick optional and set the de.stinaijon entity to Book. We will 
keep this as a “toone” relaiioaship, which will t*au.se Core Data 
to create and store a new- instance of an Author entity for every 
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author of every book. A more efficient way to clo it would be to 
click the To-Many Refatioaship clitxkbox and reuse Author entities 
when an Author entity already exists, but that can’t lie done just 
using Cocoa Bindings and would require srjine code to enfort:e. 
For sake of brevity, iinplementing the more eft’icieni version is 
left as an exercise* for the reader. 

Finally, we need to go back to the Book entity and define 
its rebtionship back to the Author entit>^ we just created. Since 
we need Uj lie able to store multiple audit ir.s in a single book, 
create a new relationship in the Book entity and c:ill it authors. 
Leave it optional, since there are some Ixxiks without a known 
author, and tail the destination entity to Author. ,Set the inverse 
relationship to books, which tells Core Data that ihe.se rwx> 
relationships are actually the sjime relationship viewed from 
different entities (as you do it, watch tlie objett gniph and you'll 
see the tw'o lines conneiaing the Book and Author entities merge 
into a single line). This time, we do want to click the To-Many 
Relationship checktxix, since we need to be able to store more 
than one iiLtdior for a book. 

Save it. Your data mt>del is done. We haven’t written a 
single line of ccxle, yet evcrydiing is now in place to initialize, 
use, persist, deletej and copy data. 

Creating and Binding the Interface 

'Ibis step, at first, works exactly as it has for years. Double¬ 
click MainMenu.nib in XCodc, winch w'ill open U[i Interface 
Builder where yoti am design your interface. I made mine Icxik 
like this: 



In order to impleineni the lookup liutton, we will have to 
vvriie some axle, but surprisingly lirtle. Before we do tliai, 
however, well use Cocoa Bindings to link ilie user interlace 
direaly lo our Core Dam context, which will IcH us add, edit, and 
delete objects without writing txxle. 

In order to proceed, we do need to add a couple of non¬ 
visual items to our nib. 'ITiese are NSArrayController instances, 
NSArrayControllers are a handy pan of Cocoa Binding.s that take 
care of mast of the potential interactit>ns a user or user interface 
element couki have with an array of ckiia. With the release of 


Core Data, NSArrayControllers can he configured to 
automatically load their data from the context. We need one 
controller to manage all the books that have been entered, and 
one to manage the authors of the currently selected htK)k. 

To add an NSArrayController instance to your nib, .simply 
drag the icon that Icxrks like tliree little green boxes from the 
Controllers palette (figure 3) to your nib file’s main window and 
name it Books. 


O O Cocoa-Controllers CD 



A 


Figure 3. NSArrayController icon 

Single-click the new array controller, imd press ?1 to bring 
up the army controller's atiribuLcs in the inspector palette. Make 
sure that the mode Is set to Entity and Automatically Prepares 
Content is seletied. Type Book into the Entity Name field. Tliis Ls 
how Cocoa Bindings knows to populate the array controller 
from Oire Data with all the Book entities. 

We alstJ have to tell Cocoa ifiitdiiigs the approprbte 
context from which to |K>pulaie the array controller. We can dt> 
tliis l>y pressing ?4 and bringing up the army controller’s 
bindings in the inspector. The Ixrttommosl entry on the bindings 
paleue, under the Parameters section, is managedObjeetContext. 
Click this to expand it, and click the Bind checkbox. For the Bind 
To field select MTGoreDataAppDelegate, the application delegate 
that was autoiiialically created for you. 

In the Model Key Path field, lype in managedObjeetContext, 
which IS I he name of an accessor methexJ created automatically 
for you in MTCo re Data App Delegate that returns the applic:ation's 
context. Leave the Value Transformer field blank; w^e1l talk alx)ul 
value transformers in a future article. 

'Dial lakes c'are of the NSArrayController that will Ix^ used for 
the bcK>ks table on tlie left side of the window. We also need 
one for the autliors table. This one’s a tad bit trickier because, 
unlike the Books army controller, wc only want to show those 
authors that correspond to the currently selected lKK)k. Drag 
another NSArrayControlter to your nib and rename it Authors, 

In the cx>ntroIlers attributes, rmike sure it's set to Entity with a 
mime of Autlior and that AutomaticaJly Prepares Content is selected. 
In the array controller’s bindings, set the managedObjeetContext 
exactly as you did widi the Books array contrf>ller. 
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Now, we’ll tell it to only load chase authors wlio are authors 
of the currently selected lxx)k. We do lliis with tlie contentSet 
binding under the Controller Content heading. Click on ii to expand 
it, and click the bind checklx)x. Bind this to ilie Books an^ay 
controller witli a Controller Key value of selection, which should be 
the default and tells Core Data to t>ull data from the selec icd item 
in the Books array contn>!ler. In the Model Key Path field, type 
authors, whicli is the name of the relatioasliip in our Book entity 
that we want to use for populating tills an*ay controller. 

Now, let’s bind up die user interface elements. Ekmble-click 
the books table down the left side, then double-click again so 
that die table column, and ntJi ilie table or scroll view, is 
selected* 'fype ?4 to bring up the bindings and click on die 
value binding to expand it. Bind it to the Books array controller 
with a Controller Key of arrangedObjects, which binds the column 
to the objects in the Books array, in the cotTcct sort order if one 
is specified. Finally, in the Model Key Path field, type in title, 
which is the name of the attribute we want to display in this 
column. The only other tiling wc need to do is to cfleck 
Continuously Updates Value, wliich ensures that tlie data mcxiel 
and user interface are always kept synchronized, not just when 
you tab out of a field. 

Next, douiile-c’Uck the other table on your interface—die 
authors list—twice, so that the table column is seieeled and 
bring up die liindings for it, 'fhls time, bind the value panimeter 
to tlie arrangedObjects key of the Authors array controller and 
type in name for the key path, which tells it to display die name 
of the author in tliis column, 

Tfiat takes care of the two tables on our interface, 11ie 
individual fields are just as easy. Since we want to display data 
alx)ut the hook currendy selected in the left-hand table, we need 
to hind each field to the selection key of the Books array 
cxinLroller. For every field. Continuously Updates Values should fx: 
checked. 'I'he only dilTerence in the bindings of the different 
fields is the Model Key Path field, which slanild be the attribute 
name (from the Book entity) iliat you want displayed in iliai 
field. You can also check Validates Immediately if you want the 
input value to Ijc checked when tabbing out of die field mfher 
than at save time. I lere's what tlie value binding should look like 
for the isbn field: 
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Figure 4. Bindings for ISBN field 


Once youVe Ixiutid all the other fields on the interfac.'e (make 
suix:? the NSImageView is set to enabled), there's just one task 
remaining before we uy ii out. See those fiiile buttons with the plits 
and minus signs? WeVe already cteaied die abilit)^ to edit <liiia in 
die context. Now, we're going to let these buttons add and delete 
Book and Author cniides to the aintext, again without writing any 
mde. Contn>l-click the pltis button in the lower left of the window 
and drag to the Books array aintroUer. Connea tlie litiUon's taiget 
to the add: oudei. Rqxrat with die minus btiutin next to it, inn 
conned the laigel iastead to the remove: oudet. Do the siime thing 
fiir die two buttons Ixilow the auiliors table, but bind to the Authois 
army controller instead of die Books array coniioiler. 

Let ‘Er Rip... 

Well, we liaven’t written any code, but go ahead and cximpile 
and nm llie application. Press the plus button and you’ll get a new, 
uniided lx)ok. Hdit any of die fields or drop a pitturc' onto the 
image view, and ilien quit. Wlien you launch the pnigiam again, 
your diita is still there. If a Ixiok Is .selected, and you press die 
minus button, die Ixxik gets deleted. Hit ?Z and ii tomes Irack, 
Ltx>k Mom: free undo! Change the title of the Ixxik, and the table 
column on die left instantly reflects the t^hange. Pretty ea.sy, huh? 

A Little Spit and Polish 

We can do a few quick tilings to add some professional 
touches to our application. We tan link the Save menu item to 
the saveAction: outlei of MTCoreDafaAppDelegate, and allow the 
icser to save any time in the fashion they’re used to, rather than 
just at wlien the application quiLs. Want to give the ability to 
revert? Still easy, bui we do have tti add bit of code for that. 

Listing 1: MTCoreDataAppDelegate*ni 

reveriAcUon 

Aikling these two methods to our ;ipplk“jii<jii ammiUcf and then binding 
the Keven menu item to the first one allows the user to advert to ilic lajst 
saved version.The first nielluHl simply invokes a sliect asking if they really 
want to revert. The second niethtKl is called when the slicei ends, and dex'S a 
follhack if the user confiniied Rollback is the SQL term for reverting;The 
EOF heritage shows here in the choice of methtid name. 

[TBAetion)revertActlon:(id)tender 
I 

NSHcginAJertSheet(^"Are you sure?".@”Yes".nil* 
window.jsel f .nl 1, 

^selecLot (reverSheetDidEud: ret uriiCodc icon text Info:). 
nil,@"Are you aure you want to revert?")r 

(void) teverSbeetMdEnd: (KSWlndow sheet 
returnCodei (int)rutLitf]CtMlc 
contcxtlnfo:(void *)contexlTnfo 
I 

if (returfiCode “ NSAlettAlternateReturn) 

tieelf nianagcdObjectContextl rollback]; 

I 

Another tjuick bit of polish we can do Is to make the minus 
hutlon.s enabled only when a txxik Ls higlilighted and, therefore, 
able to lx* deleted. We can do tliis by binding its enabled binding 


18 July • 2(X)5 


WWW.MACTFCH.COM 













pjjrameter to tlie canRemove conirtjller key of the Books amiy 
e(>ntn)ller IJkewise witii ilie authors remove Imuon to the 
Authors array c:ontroIler. 

finally, one last nicety we'll handle this month is to tell the 
Books array controller to son based on the title of the h(K>k. 'Hits 
will cause the table on the left liand skle to display the titles in 
alplialxriical order, since it's bound to the arrangedObjects outlet 
of (iiat NSArrayController. Unfortunately, tills one takes a bit of 
code, but not much. 

Listing 2; MTCorcDataAppDelegate.m 

Sortin}^ the Books array controller 

lb sort our lxx>fcs table, we need to create a sort descriptor and 
siippiy it to our airay controller. CR^ite an IBOuUet instance wiriable 
in tlte MTCoreDataAppDelegate.h header tile. Make it an 
NSAnayController and ^ive it a name ol‘ books. In interface luiilder, 
bind the Books array controller to this outlet (you may have to drag 
MTCoreDataAppDelegate.h over to Tmerkice Builder to make sure it 
knows aixxil your ctianges). llie l?c^t place to specify our sort 
tlesc'Jiptor is w^hen our application is finished launthing, so well use 
tile liantly' notiftcation metlKxl applicationDidFinishLaunching: that we 
get autoinaiitnlly by viitue of Ix^ing llic NSApplicatbn dele|^te. 

- [voidjapplicationBidFirifihLaunchlng: 

(NStJottricjJtiQn UaNotifiKatlon 

I 

//Thiji mn tlcscriptor says to son alphabeiically, in ascending order {A 
then B tlien Q 

// based c»i the propttty called title. 

HSSortDeacrlpttjr' sott ^ t iNSSortDescriptor alloc] 

InitWi thKey sficending: YES|: 

//lell our array controller to ase our mn descriptor 
[books setSortDesetiptors: 

[NSArray arrayyithObject: sort]1: 

[sort releas^I: 

J 

//'llie Books array contruller ;dso lias to be told to re-sort when something 
iluii affects 

// the sort order changes. In our case, the tide fietd is the only one that can 
affect ihe 

// s<irt ortler of the book table, so we’ll bind it to this niciiiod to Iniertace 
Builder 

// Doing Si) tells the array controller Et) re-sort based on the sort deseriplor 
we gave it 

// any time the lillc value is changed on the interface earlier 

- (I BAe t i on) £ ea rr an geBo oks: (Id} so ndo r 
I 

[books rearrangeObjeets]^ 

I 

One Last Thing 

MTCoreDataAppDelegate, the upplication delegate that was 
created automatically for you has an accessor meihtKl, also 
created automatically, that it's worth taking a lcx)k at l>ecaust' it’s 
the key U) changing the Core Dura storage options. By default. 
Core l>aia uses an XML file. You can change this to use a binary 
file or an embedded SQLilc datalra.se, by making a rnintir tweak 
lo the managedObjaetContext method- Lexjk at the items in bold 
in the Ibllowing excerpt from mangedObjeetContext; the first is 
the filename that wall be used for the persistence siore, ihe 


second tells Core Darn liow' store the data. 

Listing 3: MTCareDataAppDclcgatc^m 

Changing Core Data Storage Options 

utl ^ [BSURL fileURLWithPatb: lappiicationSupportFolder 
stringByAppendingPaihCoinponetit: e"MTCoreData.xml"j J: 
coordinator " [[NSFerBistentStoreCoordirmLot ailocj 

iaitWitbManagedObjectHodel‘ [fielf managedObjectModol]]: 

If ([coordinator addPersifitentStoreWlthType:NSXMLSton?Type 
configuration:nil tPRLrurl options:nii error3 lierrorl) 

By changing the value NSXMLSloreType to one of the other 
available trpiion.s, you change how Core Data will persist ytjtir 
data. Changing die value to NSBinaryStoreType will cause Core 
Data U) store the data as a binary file. Storing it in 
NSSQLiteStoreType wifi cause Core Data lo create an emlx^dded 
SQLite database, Tliere is acaially a fourdi possible option here, 
liuL it's one that doesn't make much sense to use: 
NSlnMemoryStoreType, Specifying the last option will cause Caire 
Data to discard all your cLita at quit time, so won't genemlly lx 
recommended by peojile who like you. 

Allhough not strictly requirctL it i.s gorxl form to change ilie 
filename used to url so that a different file extension is used 
if you change the stoR" lype^ having a binary or SQIJte file witli a 
-xml ending is likely to causc^ confusion. Feel free to use any 
extensioEi llial seems appropriate for your situation. PersonaBy, 1 
use ,sqlite3 w'hen using NSSQUteStoreType and no extension w'hen 
using NSBinaryStoreType, l>ui iLse whatever tickles your fiincy. 

Conclusion 

At this point, weVe w'ricten around diirty tines of code—and 
that's even ct>unting lines willt jtisi a limcket—and we have a 
full flerlged application capable of saving text, dates, and images 
and displaying them in an ordered table view. Our application 
validates field values, allows undo and revert and generally gives 
the user a good eliunk of the functionality they expect from a 
finished application. In our next article, well re-implement the 
Amazon ISBN lookup to show how we add, edit, and delete data 
programmatically, then we’ll dive into some more advanced 
funtaionaiity requiring us lo siilxlass NSManagedObject. 

This article should have given you enough of a glimpse of 
Core Data’s |x>ssibiliiies to understand wiiy many developers are 
salivating over it. Core Data tan give an incrcdil)le Ixxxst to your 
productivity and allow you to create more robust, more easily 
maintained applications faster than previously pc^ssible and. 
frankly, it's hard to hale lhar. 



Abouf The Author 


JeifLtMmhe is a long time Uoi user and programmer who st^hasn^t figured 
out whot he wonts to do when he grows up, wM rV okayr because he 
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Style For 

Cocoa Programmers 


A S developers and teachers, we spend a lot of time dealing 
with issues of style. Not just because we like to look cool 
for the ladies; code that is written by a stylish programmer 
is easier to read and maintain. The Cocoa community has 
developed idioms, and if you want other developers to be able to 
easily comprehend your code, you should follow tho.se idioms. 


Issue #1: Whitespace 

Here es a perfk'i setter tiKihod that explieidy 
invokes key-value observing: 

(vj^idlsetBorderColorI (Color ')c 
I 

if Cc “ borderCoIor) I 
return: 

1 

Leeli willChangeValueForKey ;t?"borclerGalor*l: 

Ic retain]: 

fborderColor release]: 
borderColor “ cr 

[self di!5ChangeValueForKey:@"borderCoior"l; 

I 

Notice the use of whitespace. In particular, we do 
not put spaces after cxjlons. We do not put spaces after 
the type of llie parameter (lliat is, '"(Dog *)"). 

Also, notice that there are no comments. What this 
Eneihod dcx?s is self-evident from its name. T(k> many 
comments tun lx: just as annoying as kki few. 

Issue #2: Grouping Methods 

In an iniplementation file, mclhtxis should be 
grouped in a meaningful manner In partiailar, we try 
lo follow this order: 

Class methods 
Initializers and dealltK 
copyWiLhZone: 

IsEqual: 
hash 


initWl thCodar: Ulld encodeWlthCoder: 

action methtxis 

otlier methods (subgroup ineaningfully) 
delegate meiluids 

accessor metliods (in setrer/geuer j^airs) 

Use ttpragma mark lo show where a group of methods 
begins, llie information will show up in the popup in Xcode. 
For example, you might in.sen tliese lines: 

it^pragsiLi mark Coding methods 
^pragma mark Color metrics 
ilipragjija mark Accessors 

So that your Xc'txle popup w'ould l(K>k like this: 




- sono - punu aim w — : 


/ H @imp1emeniaiioii Card 



□ 

^init 



m 

-deatioc 



Coding methods 



m 

-1 nitwit hCoder: 



B 

-encodeWithCoder: 



Color metrics 


u 

B 

-border Brightness 



m 

-interiorfirighiness 


d 

Attestors 



Q 

-borderCoIor 



Q 

-setBorderCoJor: 



m 

-intenorCoIor 



m 

-setInteriorColor: 
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Issue #3: Naming methods 

If you have a methcxl that letiirns the brightnes^s of a border, 
it jihouid l>e named ihusly: 

{float )bord^^tBrlght ness: 

We d<5 not put articles on method names: 

(f loaLt ]i theBoiderBrightness: 

We do not prefix methods with get-r 
{float)getflorderBrightness: 

Tile exception to this aile is if the method Is pass-by-reference: 

float t. g, b; 

[bordcrColor gelRed t&r 
blue: 
green :&g 
alpha: NULL I; 

If a method takes one argument and is prefixed with set-, 
it should be an accessor. In particular, an action method should 
never be prefixed witli set-. 

Issue #4: What Goes In 
The .h File 

The jirimary purpose of your ,h tile is so that I can create 
an instance of your c ias.s and send mess^iges to it. Many people 
put too much information in their ii files. Don^t declare' any of 
the following in the .h file: 

1) Delegate methods. 

2) Private methods. 

3) Any met I tods in a proi(K:oI that you conform to. l-'or example, 

if you have: 


^interface Chowder : USObJect (NSCopying) 

There Is no reason to declare copyWithZone: in your .h file. 

4) Any inherited or overridden niethods. 

Issue #5: Declaring Local 
Variables 

Declare teni|X)nuy varial)le in a ''jusi-in'iime” manner. Wlien 
I‘m reading your cxxle, J don^i w^ant to (lave to sctoII to the 
l)C‘ginning of (he methtxl to figure out rlie type of a local wariabie. 
Move tlie declaration as clcxsc to the finil use as possible. 

The Analysis and Design 
Workshop 

in a short column, it is easy to discuss small issues like 
code fjrmatting and variable naming. For larger and 
deeper issues, we need a much l^iggcr forum. At the ranch 
in August, we are ho.sting an "Analysis and Design 
Workshop." John Graziano, who had a major part in the 
design of Xcodc, WebObjecis Builder, and many of the 
animation systems at Pixar, will lecture and guide hands-on 
exercises that teach good design practices, lie is going to 
locus on creating designs that make change and 
maintenance easy. John started developing these ideas at 
NeXT, and they have received much acclaim within NeXT, 
Apple, and Pixar. Bring your specifications, and go home 
with the beginnings of a really good design for your app. 
The workshop is August 15 - 19 in Atlanta. We hope to see 
you llicTC. 


T'ill 



Whoever said it's cheaper to stay 
home, didn't get out very often. 


The cost of keeping servers 
in-house can far exceed the 
cost of server outsourcing. 

That's where XservHosting comes in. 
With Xserve Coiocation services, you 
can afford cost-effective, fiexibie, and 
highiy reiiabfe network and internet 
services, freeing up more of your time 
to take care of business. Don't stay 
home managing your servers - cali us 
today at 949-480-9701 or visit our 
website at xservhosting.com. 


Starting at only $130.00 per month, 
Xserve Colocation includes: 

• Free Setup for a savings of $50.00* 

• Rackspace and power 

• 1Mbit connection burstable to 100 Mbits 
with uniimited data transfer. 

• Please mention code lv)Tlvl0305, 


SXXSH 

XSERVH 


OSTING 


powering the xseri>e revolution 


Kserve Colocation | Hosting t QuickTime Streaming 

































DevDepot sells the tools, toys and technology to put more muscle into your Mac. Visit our 
online store today for special offers and great new products, www.devdepot.com 



Television is abo ut to get a whole lot more i 



EyeTV 200 


Watrh TV nn vniir M;ir! 



Watch TV on your Mac 

EyeTV features a 124-channel cable-ready analog tuner and DVD quality 
MPEG-2 video encoder. 

Record TV on your Mac and Archive to Disk 

Collect and organize your favorite shows to watch whenever you want, 
then update video content to DVD.* Ooast 6 Titanium required). 

Don't miss a thing 

Use EyeTV's Electronic Program Guide to find exactly what you are 
looking for, and program EyeTV to record it. Program EyeTV from 
anywhere via the Internet. 



• MPEG-2 Video Encoding 

• Digitize Analog Video 


• Record TV otn Your Mac 

• Edit Out Unwanted Content 


• Archive Recorded TV To DVD* • The Speed And Power Of Firewire 


go^ 

digital ^ 

Convert your analog 
video tapes to 
digital in realtime, 
then burn them 
to DVD! * 


NEW 


EyeTV now lets you i 
export to iMovie®, 
DVD® and DVD 
Studio Pro®, making 
it easier to create 
professional quality 
recordings. 
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More Great Products 


SYNCBOX 


\ Buy Today and Save! 


Transfer data from your USB devices with 
the touch of a button. 

* Never run out of memory space again! 


- No computer required, 100% portable 
' Sleek and compact design 

• Easy to use, one button operation 

• Complies with USB 1.1 specifications 

- Supports both USB 1.1 and USB 2.0 

• Uses 3 AAA alkaline batteries (not included) 



EASILY GET DATA FROM: 

• Storage Devices - MP3 Players 

- Digital Cameras • Card Readers 

- Flash Drives • AND MORE! 


fatally’ 


iTripmini 

The iTrip mini was 

designed exclusively 
for the iPod mini. 


FMTraisifiitter 


Listen in your carl 

ITtip 


NO BATTERIES NEEDED! 

The iTrip mini only needs a tiny bit 
of power that it gets directly from 
your iPod mini. 
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iMic 


USB Audio Interfaiie 


The iMic is a must-have device for people 
who are serious about high quality audio. 

Connect virtually any sound device to 

your iBook, PowerBook, PowerMac or other 
Mac or PC with a USB port. 




ONLY 

$3999 




Its form 

matches all 
the curves 
of the iPod 
mini, and 
sounds even 
sweeter! 






a Griffin Technology 


miHYlM 


11 iMic SUPPORTS: 

^ ‘ 'Line Level i 

Microphones ' 

;i • Mic Level 

Microphones 
• Multimedia 
Devices 

1 - Headsets .. ' 

• Communications 
; Devices 

^ from Griffin Technology 




DevDepot is not responsible for typograpbical errors. Offers subject to change at any time © 1984-2004 Developer Depot Inc, Some 
material copyright of tfieir respective holders. All Rights Reserved. Developer Depot. Inc is a division of Allume Systems, Inc located 
In California. 
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IVIac OS X 


Part S. 


By David Hill 


Introduction 


In ihc Iasi urtidc, we covered some iniroduaory 
material and put togetlier a bask' st:recn saver. We also 
covered some debuj^ging tips that should have helped 
you gel your own projects started. Now that you've got 
a simple screen saver up and ninning and you've got a 
grasp of the ScreenSaverView class, let's take things a 
bit further and add a simple configuration sheet. Well 
need to inakc several modifications to our pnjjcct. 


L Clumge the code in j>rojectNanieView,h to this: 


jfinport <ScreeiiSaver/ScreenSaver.h> 
fdefine kConfigSheetSlB §"ConfigureSheet'‘ 


#interface projectNameView ; SctOf?n5averViev I 
TBOutlet HSWitldov* confifiUreSheei; 

IBOuilet Id ahouldRotateCbeckboat; 

BUOL l^Rc^tatingRectangles; 

BOOL mDrawBackgroijnd; 


I 


• (iSAction) cenceiSheetActlon: (Id) oender; 
- (IBAction) okSheetAction: Cid) tender; 

#eTid 


if ( configureSheet == nil ) 1 

fNSBundle loadNibNamed; kCofifigSheetNTB ownet: 
self] : 

I 

tsbouidRole teCbaekbox aetState: 
iaRotatingRectangles]: 
return configureSheet: 


4, Conditionalize the n>taiion code in drawRect: like so: 


(rotation rotateByDegrees: degreesj; 
[rotation concat]: 


CIBAction) cancelSheetActioo: (id) sender ( 

// close the sheet without saving the settings 
[RSApp endSbeet; configureSheet1; 


7, Add an okSheetAction: method diat shoukl look like: 


‘ (IBAction) okSheetAction: (id) sender ( 

// record the settings In the ennfiguratioo 
sheet 

iBRotatingRectangles = UhouldRotateCheckbox 
state]; 

iNSApp endSheet: configureSheet]; 

I 




m:* 


2. Change the hasConfigureSheet metiKxl to return YES, 
5^ Change the code in the configureSheet method to 
this: 


if ( IflRotatlngRectangles ) I 
NSAffineTransforni* rotation * 

[NSAffineTranaforra tranaforttil; 
float degrees - SSRandomFloatBetweenf 0*0. 360*0 


5. Add the following line to in it With Frame-isPreview: 
liefore returning self: 


IsRotatlngRectangieB “ YES; 

6. Add a cancelSheetAction: method that should look like: 
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That\s the easy part to ex[)iain since ii only involves 
code. We ve ^oi all the code in place for our configuration 
sheet* but where's the slieei itself? 'J’hat would be the tricky 
part. Fire up Interface Builder and create a new empty NIB. In 
order to connecr our screen saver view class to elements in 
the NIB and vice versa* we're going to need to teach IB about 
our custom class. By default, IB doesn't know about the 
ScreensaverView superclass so well start there. Arrange your 
project window and the NIB window such that you can see 
both. Open Lite ScreenSaverView.h header file in Xcode and 
drag the header (either the window title bar proxy or the 
header icon in the Groups and Files outline) it? tlie NIB 
window. You should .see a green cursor with a plus in it 
when the cursor is over the IB window as seen in Figure F 
7'hai’s a good .sign and it means that IB will parse the file and 
absorb the Screen Saver View class infoniiation when you drop 
the header fife into tfie IB windtnv. 
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Figure I: Teaching Interface Builder about 
ScreenSaverView 


O O Window 


Q Rotate the Rectangles 


{ Cancel ^ ( OK ) 




Figure 2: Our finished configuration window 

Witii our «)ntrols in plact^, wu need to make our final 
connections. The view needs to know*^ ulx:?ut die sheet in order 
to close it and the controls need to know htjw to tell the view 
they've Ix^en clickecL CotitruUlrag front ilie RIe's Owner to ihe 
window (either in the Instances view or the titlebar of the 
window ilselD and set the configure Sheet connection. See Figure 
5 if you need help. Contrt>l-drag from File's Owner to the 
checkb(?x and connect it to the shouldRotateCheckbox outlet. 
Conrrui-drag from the OK and Cancel buttons to File’s Owner and 
set the okSheetAction: and cancelSheetAction: connections, 
respectively. Figure 4 shows the okSheetAction: connection. 





Now weTe ready to teach 10 alnml (?ur cusitjm 
projeclNameView class but there'.s a simpler way than dragging 
header files around and juggling windows. Switch to IB, switch 
to Ihe Classes tab in the NIB window* and select Read Flies... 
from the Classes menu. In the re.sulting dialog* navigate to your 
project folder, select your projectNameView.h header, and click 
Parse As a final step, we need to tell IB that our NIB wall be 
owned (this usually means loaded) by our custom class, vSw'ilch 
the NIB file view to Instances and select the File's Owner. Open 
ihe Info window' (SIllin'-CMD-l) and sdcci Custom Class (CMD- 
5) from the popup menu. Find project Name View in the list and 
select it to change die class. 

At this point* IB knows alK>Lit our ciLstom header file and we 
ain start crediting the sheet and wiling it up. The screen silver 
engine is expecting the configureSheet metliod to return an 
NSWindow so let's give it one. Show the palette in IB and select 
the Windows button from the tcxjlbar. Dmg a nonnal window 
into the NIB dtxunient window' to add it to your NIB. Switch to 
the Controls portion of ilie tB f>aleiie and add a switch (a 
checklx)X for you Carbon people) and two butu?ns to your 
window. Cliange one button to say OK and the otlier to say 
Cancel. Cliange the switch to say something like Rotate the 
rectangles hut the exact title doesn't matter. The window .should 
Itxik someiliing like the one in Figure 2. 


Tigure 3: Connecting the configureSheet outlet to our window 


^ # n 0 Windfpw 
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Now we're getting somewhere. Save this new NIB file as 
ContigureSheel into your project directory and IB will ask if 
*' you'd like to add it to your currently open Xcode project. Click 
Add. Build your s'^reen saver and try it oul If we're lucky, the 
saver will still build and work. Open the Desktop and Screen 
Saver preferences pane, select your saver, and click the Options 
button to see your new configuration sheet. Ho|>efully ii looks 
a lot like figure 5. Turn the n>t;iiion checkbox off then close the 
sheet and watch what liapt:)eiis to the Preview. UK>ks gtxid, 
right? All, but there's one small problem. Click the Test button 
and see for yourself. 



Figure S: The configuration sheet in action 


Defaults 


'Ihe NSUserDefaults system provides a very handy way of 
storing and retrieving user preferences in such a way that 
af>piicatioas (and screen savers) don't have to care where the 
defaults are stored Your code c'an just make the appropriate 
metlicKl inv(x:ations and liie fnimeworks handle the rest. For 
screen savers, the ScreenSaverOefaults (iass makes things even 
easier. It provides a single method, defaults 
ForModuleWilhName:, in addition to the standard methods 
provided by NSUserDefaults. Note that it is exireinely important 
that your screen saver use the ScreenSaverDefaults mechanism 
rather than NSUserDefaults. which is keyed off the application 
that is reading and writing defaults. Since st:rcen savers get 
loaded in by more than one application. you’!l need to use the 
defaultsForModuleWithName: niediod of ScreenSaverDefaults tt) 
keep your preferences straiglit. As you might expect from the 
name, a screen saver uses defaultsForWoduleWilhName: to obtain 
a ScreenSaverDefaults referent:e tliai it can Uien use to load and 
store preferences. Let's see how^ that w^orks In practice f>y 
adding code to handle our one preference value, 
isRotatingRectangles. First, we need to make sure that the 
defaults system knows what our global defauli lor 
isRotatingRectangies should l>e (would that be a default default?) 
by registering a default dktionaiyc 


Why is the screen saver still rotating rectangles when we 
clearly turned off die checklxjx in the configuration sheet? The 
answer is simple and this is a gtxjd excuse to drive home the 
underlying reason. The screen saver engine creates a separate 
instance of die current saver whenever it needs to blank a 
different area, llie Preview pane gets an instance. The Test run 
of the saver gels a new, separate instance, and if you am the 
saver for real via a hot corner you 11 get yet another instant:e, 
Tho.se of you mxh multiple monitors may have already noticed 
that Che saver draws different things on each monitor w^hich 
shows that each monitor also gets its ow^n instance of the 
screen saver. For the most part, this is a gfxxl thing but there 
are times when you'd like to share some state between the 
different instances. User fireferences are the nirist common 
aise and tlie Screensaver fnimework provides h convenient 
solution in die form of the ScreenSaverDefaults class and its 
defaultsForModuIeWithName: method. 

In the next section, we'll use defaultsForModuIeWithName: to 
store and reiiieve the curren! isRotatingRectangles setting so diat 
each screen saver instance wii! do the right diing. 


1, Add the following ckTiiie statements to projecINameView.h: 


Ifdefine kDefaultsHofluleNamG 

pro j ec r Naiio_Randcitn_RectanRl es" 
#d efin e idlet ault sIs Rot slin gloc t a ng1esKe y 
@"isRotatlngR€ctanglosDo fault** 
fldeflne kBefauItsYesStrlng ©"YES'* 


2. Declare a new iieltx.T metluKl in projectNameView.h: 

- (ScreenSaverD^faulti;*) dofaultK; 

3, Add the new helper nieiht)d definition to projectNameView.m: 


(ScreenSaverDefaultsM defaults I 

// there's no need to cache this value so we It make a handy accessor 
return [ScreenSaverDefaults defaultsForWoduleWithHame: 
kDefauitsHodul&NameJ; 


4. Replace the assign men i to 
in it Wi th Frame: isPrevi e w: w i 11 1 : 


// 


find the defaults we should use for this screen saver 
ScreenSaverDefaults* screonSaverDefaulta “ 

Iseif defaults]; 

// create a dictionar)' to ctmtain otir global default values 
NSDlctionBry* defaultDict = [NSDictionary 

dlctlonaryWithObject: kBefaultsYeaString 
forKeyi kDefaultsIsRatatingRectanglesKey] : 

// register those global defaults 

fScreenSaverDefaults reglstcrDefaults: defaultDict]: 

// n()w wc can read in the curri'ni default value knowing 
// iliat wc’ll always get the user defaults or our glolial dehtulLs 
// if no user defaults have been set 
isRotatlTigRectanglefi " [ScreenSaverDefaults 

boolForKey: kDefaultslERotatingRectfinglesKeyl: 




isRotatingRectangles in 
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licloR' wc move on, I sShoiild jmke a few coriuiK'nt^ uIkhh 
tills code. N(xe i\vdi the defaultDictionary is created in an 
autorelcased stare so we don't liave to wony abcnit cleaning it up 

* to [ireveni leaks. As you’ll see later, we also don't have to read the 
defaults hack in right away since we’li lie cliecking llic default 
value ol isRotatingRectangles Ix'fore drawing each Irame. So w'hy 
is the boolForKey: c^ll here? I included it for sevcnil reasons, not 
f the leiist of which was reinhircement of the defaults idi<jnL li alsr) 

■ makes sure that we've got the c'orrect value of isRotatingRectangles 
from llie very start in case we forget to check ii later in the axle, 
['or example, the configiinaion sheet code sets the value of the 
checkbox based on ilic current value of isRotatingRectangles, If we 

I foigei to loud the appropriate value Ixfoie bringing up the sheet, 
the checklx>x will our of sync with die cuneni default value and 
users will get confused. As a final comment on the 
ff' initWithFrameasPreview: code, note tfiat we've now^ got two string 
key values; kDefaultsModuleNam© that represenLs the name of the 
itKxluIe in the defaults system and kDefaultsIsRotatingRectangtesKey 
that w^e1l need to use whenever we w^mt to access our default 
value. What else needs to change in order to correctly handle die 
default value? Well, as I mentioned alxive we‘I! lx checking itie 
default value in die drawRect; medtcxl m that we know whether or 
not to nxate tlie rectangles. 

5. Arid this code txfore if ( isRotatingRectangles } in i!jc 
drawRect: method of projectNameView.m; 

isRotatingRectangles - [[self defaults] 

boolForKeyi kfiefaultsIsRotatingRectanglesKeyl; 

Checking here makes sure that if anylxxly changes die 
default value, even while we're running, well get die corren 
value and change our drawing style in mid-stream. One odier 
iinixiriant concept for user defaults that can lx shared betw'een 
different iasiunces is that you need to update die defaidts 
whenever the user changes a value. In our sample, the only 
place that the user gets to change anything is in the 
configuration sheet so we'li need to add a bit of code there. 

6, Add the following code to the okSheetAction: mediod Ixfore 
wc clo.se the sheet in the projectNameView.m tile: 

ivj // write aiit die currernt default so other instances of the saver pick up 
the change, too. 

txtyy ([seif defaults) setBool: IsRotfitltigRectangies 

forKey: kDefaultsIsRotatingRactangiasKeyl; 

// update the disk sfi that the .screen s;iver engine will pick up the 
correct values 

[[self defaulisl synchronizej : 

TliLs ccxie hikes the latest version of the isRotatingRectangles 
variable and stores it in tiie screen saver’s defaults. At the end 
there is a call to synchronize, but why? The synchronize call is 
there so that the true screen .saver mode (invoked via the hoi 
corner or system idle state) picks up the correct default value 
even if the System Preferences application is sdll running. This 
is technically just an implementation detail, but it turns out that 
w^hile the Preview and Test mrxles share the tn-memory defaults, 




due to the faa that ihcyTe lx>th instantiated from the System 
Preferences process, there is a separate process that handles die 
full invtxalion of the screen saver inodulc when your system 
has been idle for loo long or you move die mouse into die 
Activate Screen Saver liot comer. The screen saver instance 
knided by this ScreenSaverEngine application can only retrieve 
the latest defaults that have been written to disk and for screen 
saver modules tliai only seems to happen at two times: when 
the user quits the System Preferences application and when tlie 
screen saver explitifiy calls synchronize, 

For the purposes td this article, Tve used a very generic 
scheme for the configuration sheet and its defaults, hi this 
scheme die? defaults are only u|xiatcd and synchronized once 
die user is done changing all of tlie values. No changes are 
made to any defaults or screen saver slate varialiles while the 
options sheet is open and the defaults only gel updated once 
per invcxatitin of the configuration sheet rather than tin each 
control change. This style of configiinition sheet also gives die 
user the option of canceling any changes they Ve made to the 
settings. The cemfig urn lion sheet is one way to inlcTact with and 
control a screen saver hui scram savers can also react to a .set 
of user input events much like any normal application. You can 
use lhc.se evenis to enable and disable effects, toggle status 
displays, and even turn your scTecn saver into a garnet 
(Anyhxxly remember Lunatic Fringe?) In the next section, we'll 
take a Itxik at the nietJiods you’ii need to override to catch these 
events and liandle them in your screen saver. 

Handling Events 

the view system in Cxxxxi provides a rich set of user input 
events that we can tap into wliile a screen saver is running. Tlie 
iint>lemeniarion in the ScreenSaverView supercla.ss u.ses most of 
the events as a signal to wake up the screen saver so the first 
thing we need to do is override ihai behavior in our sutxlass to 
[ircveni I he saver from waking prematurely . Note; don't 
override all of the events or you w^on’t be able to wake the 
scTeeti saver at all! 

1. Override the key handling ccxie by adding the following 
implementations of ineihocls inherited from the 
NSResponder class to projectView.m: 

t void)ke y Down:(K SEve n t '}the Event I 
// handle any necessary kevDown events here and pass the rest on to 
the superclass 

[super keyOown: theSventlr 
I 

|.| ‘ (vDid)keyUp: (NSEvent *)theEvent ( 

// liandle any necessary keyUp events here and fxiss tlie test on to the 
supealass 

(super keyUp: theEventli 
I 

These mediods simply pas.s all keyDown and keyUp evenLs 
up to the superclass tor it to handle. If, for example, we don't 
want keyDown events to w^ake the screen saver we can change 
the implementation of keyDown: by commenting out tlie call to 
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super. Ktjwcver, we’ll want to lianclle some keys ourselves and 
lei tlic superclass handle others. 

1, Ln that case, wc can change the keynown: code to look more 

like tills: 

// handle any ncccssar>' keyDown tvenis here and pass the rest on to the 
suptTtlass 

if ( |[theEvfint characterslgnoringjiodiriers] 
ifiEqualTo: ) I 

// the user pressed the “g’'key so draw the next rectangles in 

gri>'5cale 

grayscaieRectangleatieft 50: 

// note that the “g” key will no longer wake up the screen silver 
) eljie I 

[s up €i keyDown; theEv e nt1 : 

1 

Well also need to add code to declare 
grayscaleRectanglesLeft and check for its value while drawing so 
make the following additional changes. 

2, Add the declaration for grayscale Rectangles left to 
projectNamcView.li: 

hit grayscalekeetanglesleft! 

3, Give grayscaleRectanglesLcft an initial value in 
initWithFrame:isPreview: 

grayscaieRectanglesLeft - 0; 

4, Change the color setup in drawRect: from this: 

float red ^ SSRandomFlosiRotween( 0*0* 1*0 ): 

float greet! = SSRandonFlnatBetweent 0.0, 1.0 J: 
float blue ^ SSRandoaFloaLBetweeiit 0.0* 1,0 ); 
float alpha = SSRandomtloatBetween( 0.0* 1*0 }i 
[[MSColor colorWlthDeviceked: red 

green: green blue: blue alpha: alpha] set]i 

to tilis: 

if ( grayscaleRectaiiglesLeft ) I 

float white « SSRandonFloaLBetweenC 0.0, 1.0 ); 
float alpha “ SSRandomFloatBet ween( 0,0, 1,0 h 

[[NSGolor colorWithDeviceWhite: white 
alpha: alpha] set] : 
grayacaleRectanglesLeft-: 

I else I 

float red ^ SSRandomFloatBetween( 0,0* 1.0 ): 
float green = SSHanduinFloatBetween( 0.0, 1,0 ): 
float blue = SSRaiidoinFiootBetwoeii( 0*0, 1*0 J: 
float alpha ^ SSRandomFloatBetween{ 0.0, 1,0 )j 
[[NSColor colorWithDevieeRed: red 

green: green blue; blue alpha: alpha! net): 

1 


If you run the new version of die st'reen Sitver, you1l find ^ 
that while all the odier keys still wake up the saver, die “g” key 
traiLses die saver to dniw' a series of reiianglcs in shades of gray 
instead of the u.sual random colors. You can further mtxlily 
key Down: to intercept and liandle other keys to do whatever you 
like hut there are some useful keys^ most notably tire funaion 
and arrow keys, that don't have simple diaracter equivalents. 
The trick is knowing liow to interpret the result of 
charactersIgnoringModifiers for these keys, Tlie short aaswer is, 


y{)U don’t* The longer answer is that you'll need to extract the 
unichar value of the character bcTore comparing it to one of the 
constants like NSUpAnrowFunctionKey. Change the 
implementation of keyDown* again to l<K)k like the following 
code to see how to handle arrow keys as well. 

I* Change key Down: to look like this: 

NSStritig* eventCharacters “ 

[tbeEvEUt cbaracterslgnsrlniHodifiersi: 
unichar firstCbiiractGr ** 

teventCharacteris character At Index: 0] ; 

// h^indlc any neerssary keyOown events here and pass the rest on to the 
su])erclass 

if { [eventCharactera isEqualTo: ^’’g"! ) t 
// die user pressed the "g" key so dntw the next 50 mctangles in 
grayscale 

grayscaieReetangl&sLeft += 50: 

I else if ( firstCharacter “ KSOpArrowFunctionKey ) I 
// the user pressed ttie up armw so make the rectangles taller 
rect.angleHeightMultipil^r 2i 
I else If { firstCharacter “ NSDownArrowFunetionKey ) { 

// the user pressed the down arrow so make the rectangles shorter 
rectangleHEightMultipller /" 2: 

1 else if { firstCharacter ^ HSRightArrowFuoctiotiKey ) I 
// tile user pressed tile right arrow so make the lectangles wider 
rectarigleVidthhultiplier 7.: 

] else if ( firstCharacter “ NSheftArrowFunctionKey ) [ 

// the user pressed the left arnjw so make the rectangles narrower 
rectangleWidthHultlplier /-“ Z; 

1 else ( 

[super keyDown: theEvert]: 

I 

2. Add the deckimtions to projectNameVEew.h 

float rectangleHeightMultlplier: 
float r^ctangleWidthMultiplier: 


5. Add some initial values to initWithFramelisPreview: in 
projectNameVimm 

// set the starting muhij>liens to 1.0 
rectatigieHeigluKijl tipi ier = 1*0: 
rectangieWidthMultlplier “ 1.0: 

4, Change the rectToFill line in drawRect: u> tills: 

NSItect rectToFlU - 

NSMakeRect{ startingX* BtactiugY, 

width * rectangieWidthflultiplier, 
height * rectangleHeightMultiplier ): 

Note that we'R* still handling ant) passing taller non¬ 
arrow events on to the superclass. With llie.se L’hange*s, the 
arrow keys now control how wide and tall (or narrow and short) 
the random ret'tangles lend to lx?. Your screen saver migli!: also 
need lo handle the nKxlifier key event which covci's SHIFT, 
COMMAND, OPTION, and CONTROL Unlike the other keys, the 
uUKlifier keys don't send a keyDown: mess^tge. In.stead, your 
screen stiver needs to override the flagsChanged: mclIuKl in your 
projectNameView.m to catch rncxlifier key events. 

1. Add the following method to projectNameView.m 

' Cvoid)fIagsChauged: (NSEveut OtheEveut I 
// toggle the current sense of ihc i*sRotatingRcctanglcs flag 
// while the user is holding down the OPTION key 
if { ftheEvent modifiernags] i NSAlternateKeyMask ) ( 
rcvereeSenBeOflsRotatiugRetr tangles = YES: 

I else I 
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reverseSenseOfTsBota I in^Rectangles - NO 


NSBundle* saverfiundie = 

[KSBundle bundleForCiass: [self class)]; 
NSString^ iniagePath ^ [saverBundJe 

pathForRaflource: Image" ofType: €"JPG"]; 

NSImage* image = 

[[NSImage allcc] InltWithContentsOfFile: imagePath] 


2. At!cl ihe following tbclanitron to the pnDjectNameView.h file 
BOOL teverseSenseOflsRotatiugKectangles: 

3. Set the initial value in initWithFrameiisPreview: 


Drawing the image soeh ihat it fills the entire view' is simply a 
matter of calling the following NSImagn method: 

NSSi^e imagaSize = f image* alsic]: 

NSRect ijnageR&ct ” NSHaSeRectt 0. 0, 

itnageSizc,width* ImagGSlzG.height }; 
linage dtawInRect: vievBoutids fronsRect: imageRect 
Operation; NSGompoaiteCopy fraction: 1 . 0 ]; 
fimage release]: 


// Stan ()ut with isRotaiingRrcianglcs meufiing what it say^s 
reveraeSenaeOfTsRetatingRectangles = NO: 


4. Clieck the value in drawRect: by replacing the rotate code with: 

BOOL totsteThisEectangle ^ isRoLaLitigRectaiTgles: 

if ( raverseSetiseOflsRotatingRectangles } I 
rotateThlsRectangle = 1 rotateThisRectangle: 

I 

if ( rotateThlsRectangie ) I 
NSAfflneTransferm* rotation = 

[NSAffitieTransforttt transform]; 
float degrees ^ SSEandomFloaLBetweeD( 0 * 0 . 360.0 3 : 
trotation rotateByPegrees; degrees]: 
trotation cancat]; 


In n reni .screen saver, you’d most likely want to load any 
images you need in start Animation and keep them around 
until stopAnimalion or even projectNameViews dealloc iiieihod 
since il is very inefficient to load the image in for eveiy 
frame. You may even want to provide an accessor method 
like the following that handles loading an iJiiage ilie first 
lime it is needed. 


With those small changes, your screen saver should now 
tenifXJrarily reverse the sense of the isRotatingRectangles flag as 
long a.s you hold down the OPTION key. The only txlier events 
that yonYe likely to want to c:apture are mouse events and 
tlieyVe just as easy. NSResponder jjrovides a series of methods 
you can override for mouse movement, dragging, clicks, and 
even sctoII wheel activity, l^epending on your rec|uircmcnts, 
you [night not need to tra[7 and deal with eveiy event right 
when it linppens. If your screen saver merely adjusts its 
drawing based on the current mouse position, you may l>e able 
to simply ejuery tlie system inside drawRnct: asing the NSEvent 
class ineiliod mouseLocahon which relums the current tnouse 
position in giolxil c(K>rdinates. 

Note; watch out for niulliple monitors and Preview mode 
here. Don'i assume that the mouse position w'ill remain wiriiin 
the bounds of your view or even the main display. Users with 
multiple momtors will lx* disappointed if your screen saver fails 
t^r mislxhaves just liecause they've plugged in another display. 


(KSimsge*) backgrotmdlDiGgG { 

If ( background I mag«* “* nil ) t 
NSBundle* saverBundlt? = 

iNSSundl^ bundleFocClas^: [self clae^lI: 
NSString' fmagePath ** IsavecBiindie 

pathForResource: freest image** ofType: 
backgroundImage = [[NSInage alloc] 

initWithContentsOfFile: imagePath]: 

1 

return backgroundimage; 


As you move beyond Crxoa, you may retjuire some bit of 
futictiunality from Quartz 2D that Cocoa doesn’t expose. Not 
to worry. Cocoa makes it easy to drop down and call Quartz 
2D directly. When the sy.sicm calls your .screen saver's 
drawRect: met hod ^ the drawing environment is already set up 
for you. You can draw immedlaiely with Cocoa as we've seen 
or you can ask Cocoa for the CGContextRef that you'll need to 
make Quartz 2D drawing calls. The t:f>de to retrieve the 
context looks like this: 

CGContextRef context ^ 

[[NSGraphiesContext currentContext] graphlcsPort]; 


Different Drawing APIs 

Up until this point, weVe Ixen using the drawing 
functionality provided by Quartz 2D and built into Cocoa, 
While NSBezierPath does prt)v[dc for easy, accessible drawing 
code, there are times when you need to do more that draw 
lines, rectangle.s, curves, etc. I his is often the ease if you 
already possess some drawing code that you’re merely trying 
to wrap up in a areen saver. The first step beyond 
NSBezierPath is to use NSImage to bad and draw images 
during drawRect:, perhaps to provide a backdrop or for use as 
sprites in your animation. NSImage is very simple to use and 
provides suppon for many common image types. In a typical 
screen saver, you'll store your images in the Resources fi>lder 
within the screen saver bundle and load them in with ccxic 
similar to the following: 


Add that line and the following ccxle to the end of drawRect: to 
draw with Quanz 2D: 

CGContextSetRGBFi11Color( contexU 1.0* 0*0. 0.0. 1.0 ); 
CGContextSetRGBStrokeColor(context. 0.0* 0.0* 1.0. 1.0 )i 
CGContextBeginPatbC context ); 

CGContextAddArcf context. NSHidXC viewBoundg 3. 

NSHIdYt viewflounde ). NSUfilghtt viewBnnnds 1 / 4.0. 

0,0. 2 * 3.141S9. 0 ); 

CGCofiLsxtClosePathC context ); 

CGContextDcawPathC context* kCGPathFillStroke }; 
CCContextFIusbt context ); 


Tills code draws a laige fed circle with a blue outline in the 
middle of die screen as you can see frE)m Figure 6. If you add tills 
LtxJe after the ncitating rectangle code fom our basic screen saver 














and isRotating Rectangles is 
tme, you1l notice that the 
circ:les don’t draw in the 
middle of die screen any more. 

Why not, yon ask? Becxaise 
the Gx:oa drawing Al^ls are 
layered on top of QiL-idz 2D, 
tliat means that tiiey simre die 
same drawing envutinment, 
including the underlying 
tmnsfomiation matrix. When 
the Cocoa code uses 
NSAffineTransform to rotate 
die drawing of die rectangle, 
diat rotation also ap|>ljes to any 
suhstx|uenl Quartz 2D cxxle. 

Tlie. moral of the story is to fiay 
attention to any changes you make to the Cocoa or Quaitz 
2D drawing slate since one affeas the other. 


Figure 6: Saving the screen vvith Quarti 2D 


screen savers. In tliis article 
weVe added a configuration 
sheet to our screen saver, 
stored and reloaded the 
resulting default value, 
learned how to handle 
keyboard anti mouse 
events, and investigated 
NSImage and Quartz 2D, 
Now you’ve got the 
informatit>n in hand to go 
oui and write some really 
cool screen savers. 




About The Author 


Summary 

Well, itnii brings us to the cinl of our series on 


DavidHiBhakeetante writer Bring in CoBege Stafiatr Texet. In a former Sfe, 
be worked in A^'s Developer Tedmad Support group helpmg developers 
print, draw, and write games, la bis free tme he ddibles in saeea savers and 
other esoteric topks. 
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PATCH PANEL • by John C. Welch 


Mac os X Server 10.4 

Tiger Server, An Overview, Pt. 1 


M A V ell, Mac OS X 10.4 Server, Tiger Server, is finally here! 


And there are a ton of changes. Enough so that most 


* * administrators are going to want to take their time 


upgrading, because Apple has given us what is the biggest upgrade 


since Server 10.0 came out. Literally, there is not one part of Server 


that has not been changed in some fashion. 


Welcome 


It's not just existing feature chuiiges 
and hug fixes eiilier. New stLilT, stuff ytiuVe 
never seen Ixrfore in Mac OS X Server 
witiiOLii installing a lot c)f M>flware and 
doing a lot of work on your own is here. 
Chat servers, Wclilog servers, Software 
Update Servers, it's all there. This is one 
upgrade that’s going to l)e worth the 
money, on pretty much any level yon want. 

However, like any kind of review, we 
need to focus on wiiai weVc going to 
cewer, so, for the s;ike of some vague 
attempt at not turning this into “Tiger and 
Peace" we1! let the new server 
administnition tools Ik* our guide. 

One thing to note Itere, by '^Server" I’m 
not just restricting this to Xserves. Vm la Iking 
atout any machine able to run Mac OS X 
Server 10.4* If 1 mention an Xserve-only 
ferirtire, Di make sure to note it as such. 

Server Admin 

Server Admin is the heart of the GUI 
icKilset for managing Mac OS X Server, and 
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ns sucin is tlie primary tool of the server adniinistnitor. Any 
changes in Seiver have to Ix! reflecleci here, and because Server 
or not, it's still a Mac, the GUI lias to work right ifie first time. 
Server Atiniin is not however a client management tool, lliat's 
Workgroufi Manager, which we’ll lie kxiking at a little later on. 
Server Admin is only here to let you run your Mac OS X server 
installations, tf you think about Server Admin's reach ending at 
ihe network interface, you’re on ilie right track. 

Server Settings 

One new feature in Server Admin, and one that Tm very 
happy with, is the ability to turn SSIl on and off. WitJi earlier 
versions, you liad to use other appli<‘;ttioas to remotely manage 
SSH, such as AKD or physically logging into the serv^er. 
Considering the adva mages of using headless servers, (no 
monitor), lx?ing a!>le to retnotely control SSH witlK>itt having SSH 
on is a necessity, so making it a check! k>x is a welcome future. 

Tlie serial numlx^r in Mac OS X Server kis changed as wdl. 
Each copy of server now checks on the network lo ensure tliat 
you aren't running multiple copies of server wiili a single copy 
.serial numiKT. It only checks on the local area network, not 
liack to Apple. While this is inconvenient, it's not going to imrt 
anyone playing by ilie rules* As well, if you are going to buy 
multiple copies of server, and want to automatically set them up 













so that you d{jn't have to manualJy enter separate serial 
numbers, Apple will pn>vkie serial numbers in that case which 
don’t use this feature, so that someone trying to set up a eotiple 
hundred servers via remote install doesn't lose their mind. 

Date and Time now contains both the Date and Time 
settings, along with the Time Zone settings, so they’re grouped 
together in a way that makes a little more sense. This 
consolidation of settings has l>een implcincnlecl throughout 
Server Admin, so if youYe iise<l to Panther's Server Admin, 
'I'iger's will lake a little getting used to, but I've found it to Ik? a 
much nicer tool once I did. 

Two changes in this parr of Server Admin are how you 
manage SSL and access to services. In Panther, SSL management 
was done in the individual service settings. So, for SSL web 
services, you liad to tell (he web service alxjut any cetTific';ites, 
set thein up, etc, In the email service, your only option was to 
use SSL or not. If you w'anted to do more with SSL in email, you 
had to leave Server admin and use the command line. In 1'iger, 
SSL is more properly iategrLitcd in with the varit>us scrvice.s that 
iLse it. In Tiger, [>asic certificate setup i.s done at the .server level, 
and you then tell the services which ceitificate you want to use* 
So you can have multiple certihe'ate.s set up if need 1x1% and then 
just select the certiheate you wish to use within the service. If 
you want t>r need to use a service - specific setup that is different 
from the certificates you’ve set up in the main SSL settings, you 
can do that too* 

ACLs 

Mac OS X 10*4 Server has changed how you set access ttj 
various services, and this revolves around one of the biggest 
changes in Tiger as an OS, namely Access Control Lists, or ACLs* 
See Ed Aktrczak\% May Mac In The ,S7je///or more great cotxrage 
of ACLs! 

With Panther and earlier, permissions were simple. Kvery 
file, or folder had one owner, one assigned group, and everyone 
else. Bach file or folder had three optit>ns, read, write, or 
excc:ute. (In Unix, when you list the contents of a folder, you are 
^executing' it.) While this is simple, and reasonably universal, it's 
also very limiting. To change access for various people, you 
luive to start getting complicated with group membership,^. Of 
course, if you get too coinplieaLed, then you am into problems, 
because you can only belong to 16 groiip.s prior to Tiger. {If ibis 
.sounds like a lot, it really isn’t. 'Hie first user on an OS X system 
iK'longs TO two groups by default, their own, and admin* In a 
university or business environment, you can hit the sixteen- 
group limit with case.) 

Aside from the group limit, three pemiissions caused other 
problems. If you have write acce,ss to a Me, but noi the folder, 
while you couldn't delete the file, you could o[x?n it up and 
delete every bit of data in the file. Even witli other options, like 
llic sLit:ky bit or the chflags tximmand, the tradititmal Unix 


permissions scheme became very liard to administer if 
you needed to use things in a way tliat they simply 
weren'l de.signed to handle. 

Enter ACLs. ACLs approach permissions differently, 
and allow for greater Hexibility. An ACL is just that' a list 
that defines who can access a given Me or folder, and 
how* The big advantage to ACLs Ls that w^ho can access a 
folder, and w4iat tliey c.'an do is not as limited. For 
example, lefs say I have a folder and I have three groups 
of j:)eople who need different access to a folder, and the 
cmients of the folder* Under Panther, I’d have to do a lot 
of workarounds to deal with multiple groups neetitng 
different access* With 'figer and ACLs, I can just assign 
each of the dircc groups to the folder and hies and set 
ilieir access accordingly. I am set individual u.ser access 
separately itKX I am also specify how^ inheritance works, 
roo, so that a given ACL can apply to every subfolder a 
given user or group creaies, and all the items that will 
ever l>e inside those subfolders, only the immediate 
children of that folder, or I can kill inlieritance entirely. 

Write access is nt>w no longer a binary' issue with 
ACLs. I can specify^ that a user can delete a file, but tliey 
canT modify the conrents. I can allow a user to administer 
the permissions on a folder without making them the 
owner, and without making them an admin. I can have 
someone who can modify existing files hut can't delete 
them. While smaller entities may not need this level of 
control, even a company with only a hundred users or so 
can easily get into sonic pretty complex rights 
management Ls.sues, and I'iger allows you to manage this 
outside of any sort of third party software. 

Now' there are .some c'iivcaLs iiere* Ohlcially, ACLs arc 
only sLipi^oned on Mac OS X Server, and you have to use 
Woriegroup Manager to manage them. You can observe 
ACLs in the Finder, but you can’t set or change them* For 
most, this will work. However, if you want command line 
access to ACLs, you can use chmod to set ACLs, and fsacldl 
to enalile or disable ACLs on a given volume. By default, 
they arc enabled for 'figer Scr\^er, and disabled in client. 
Wliile you can eriiible ACLs in client, if you don i need to, 
fd recommend not doing it. You can get very complex 
pcrniLSsions *structiires widi ACLs, and you can accidentally 
open some large holes. It’s also going Ui take a little bit 
before third party software know's wliai to do when a liser 
has write access but not delete access* (Ihis comes into 
pLiy if a file saves by creating an entirely new file, and 
deleting the old one. With the finer - grained controls of 
ACLs, it's rrivlil to brtrak this if you aren’t careful) 

A part of ACLs, are the Access Control Entities, txr 
ACEs* An ACE Ls pan of an ACL, and is the actual line in 
the ACL that specifies what a user or group can do* (The 
liest way to think of it is that an ACL is a list of ACEs, and 
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cAcU ACE [isis ;i single jx^rsem or group's Access Control 
setting<s)). 'ITic ACE ctjnuiins 4 items: 

E IJscr/Group: Who the ACE refers to, identified by a 12H-I>it 
Universally llnic|ue ID, (UUID) niimIx.T. UUID's avoid the 
problem of ‘'Which John are we talking alx)Ut'' 

2. Pennission Type: fs this ACE allowing or denying a set of 
[KTinissions 

Permission; Which of the 13 po.s>siblc jxrrmissions are being 
used and how 

4. Inherited: Is this ACL infierited from its parent, or explicitly set 

Hxplic:il ACLs are set manually in Workgroup Manager or via 
chinod. With llie llger Server ACL model, there are four kinds 
of inheritance, “Apply to this folder" means just that. I'hey only 
apply to the speciilc folder. ""Apply to child folders" meitns apply 
these settings to subfolders, but not files, “Apple to child fdes" 
means apply these sellings to tiles in the folder, but not 
subfolders, “Apply to all descentliints" means apply iliese 
senings u> everything. (Note that if you really want "A|>f)ly to all 
descendants to apply uj ALL dea^endints without question, you 
have to check all of the last three options.) Wliile it may seem 
silly to have to speciheaUy apply [>enni.ssions to the current 
folder, there's some sense. In die case of a school, you can liave 
a master school folder that only adinini.strjtors have access t<), 
but a series of class(room) folders that have different 
perntLssions and inheritance .settings, tl .said it before, and I'll say 
it again, caivftii with ACLs. Iliere are 98,304 possible 
combinations of ACL permissions, hefore you take complex 
folder hierarcliies into account. You can create some really 
bizarre problems with them if you just slap them on like paint.) 

When you use ACLs, you also have to kc-ep in mind that 
there are rules uf precedence for ACLs/ACEs: 

1. If an ohjecj ha.s no ACEs, then tmtliiional Unix, (or more 
correctly, POSIX) i>ermissi(>ns aa- used 

2. If an object has multiple ACEs, tlien l iger Server starts at tlie 
first one, anti works its way down the list until die requested 
permission is alkiwed or denied, li dien uses that ACH, along 
with the POSIX permissions, to detennine acc'ess 

3. Deny permissions overrule Allow permissions. So if 
someone has allow as part of a grou|> anti tleny as an 
individual, the Deny wins. Tiger Seiwr also reorders ACLs 
so that Deny rules come first, (Dkl I mention that ACLs t^n 
gel complicated?) 

4. Allow permissions are aimulative, so Allow penni.s.sions are die 
union of all allow permissions, including POSIX perinLssioiis. 

In addition to Itx’al file/folder ACLs, Ixah Apple Pile Protocol, 
(AFP) and Server Message Block, (SM15) file sharing protocols 
suf>port ACLs, and yt>u have to using HFS+ to use ACLs. 

Finally, Tiger's ACLs are compatible with Windows 2QQX 
ACLs. Wliile this may not make many in the open source 
coTiimuiiity happy, for anyone working in an Active Directory 
environment, this is huge, since you can now use your Active 


Direaury tools to manage j>ermissions on Tiger Server Windows 
share points. As we will see in the Windows sec'tion, this creates 
some really cool capabilities. 

However, those are just file system ACLs. Wiili Tiger Server, 
we also get Service ACLs, or SACLs, set in die Access tab of die 
main server settings in Server Admin. SACLs allow you to split 
out access to various services in Tiger Server. So you can, for 
example, only allow your domain admin groups to physically 
tog into a server and use SSH to dial server, but allow anyone 
to use file sharing via Apple File Protocol, or AFP. While this 
could lx done in Pandier, it was a manual prtKess, and tended 
to compiicaLe dungs. Tiger greatly simplifies this. Just like widi 
file ACLs, you can add muhipic groups or users, htiwever, with 
SACLs they'll all have the same setting, so there's less of a point 
in doing this in general. 



Figure 1: Service ACLs in Server Admin 

AFP Service 

With Tiger Server, AFP is now at version 3-2, and includes 
a few new features such as supjiorl for Unicode file names, 
ACLs, and 64-bii file sizes. Tlie maximum AFP volume size is 
2TB, which, while well under a 64*bii size, is still a good size 
for a volume type that yoiiJl only sec over a network. The truth 
i.s, AFP is a mature protcH'ol dial already supported Kerl.ieros, 
SSI I tunneling, and mast of the other features dial Mac users 
need, so drere's not much to change in Tiger, and Apple lias 
wisely chosen to leave that which works alone. The one 
c:omplaint I do have is that you c^an't force SSH connections, 
which is a nice option for those w ith a nec*d for high security. 

DHCP Service 

DHCP as a (protocol hasn’t changed much in quite a wliile, 
so diere's not a lot For Apple to change at the proUxoI level, 
From a management point of view, the big “new'' feature iS ihe 
ability to a.sstgn static addresses to a specific machine. (Whiie 
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yiiu conk\ do this in Panther Tigtr inte^aics this iiiio Server 
Admin J While static addresses may seem to Ik‘ at (xkis with the 
idea of DliCP it really isn't. Static' addressing allows you to 
automate router ius^signmerit, subnet mask settings, DNS and 
LDAP settings, but still keep the IP address tlie same. 'Diis can 
be Lisefrtl for .servers, test machines iliat you want to always have 
the same addres,s without hiving to [iianually assign the rest, etc. 
It's also handy for shofis ninning their own DNS without the 
Ixfiielits of Dynamic DNS, aka DDNS. 'Pile client is still set to 
DHCP, they just simply always get the same 11^ address is alL One 
thing to note here, if you liave a ntacliine that luses multit>le 
intedaces, like Ktiiemet and AirPoit, you’ll need an entry for each 
interhtce on that machine, smc'c sUitit^ DHCP uses llie Media 
Access Control (MAC) address to identify the machine, and every 
network interface hUuS a unicjue MAC address. 

DNS Service 

DNS is, in many ways, the most critical service in a Mac OS 
X network. While the Apple documentation talks about it in 
fxrliie tefm.s, 111 say this up front: If your DNS is not tmrking 
correctly }fou wv going io huife nothing but pain with Mac OS 
X Sermr Period. A badly configured DNS will not only cause 
you problems, but can, and quite often w'ill, reach out and cau.se 
problems hir people all over ilie InEemet. DNS is a place that 
you do not ever want to go witlioui a good solid guide, and 
while Apple's documentation is good for enabling and 
managing DNS on Apple servers, you railty, realiy, KPALLY 
want to buy and become one with the O'Reilly lxx)k on DNS 
and BIND. It is the liible** tor DNS administration, and no one 
running their own DNS should l->e without it. 

Tliere, that’s out of die way. \n Tiger, Apjrle us using version 
9.2.2 of the Berkeley Internet Name l>)[mjn, (aka BIND. DNS is the 
service humaas use, BIND is the server tJiat implements tliosc 
services. filNl) is also not a single piXKX^ss, but rather a collection of 
services, including the aime daemon, or named.) While the version 
of DNS/BIND that Appk* uses should nonnally .support Dynamk: 
DNS, (Di:)NS, tliitt is, DNS names tied \o your imtchine, not your IP 
address, so even if your address clianges due to DHCP, you still 
liavt‘ the SiiiiK" DNS name), there’s no support lor this in Apple’s 
inijilementation, so if you want to use DDNS on a Mac OS X Server 
lx>x, you have to install and configure DNS on your own without 
Sc!rv(^ Admin. Tliis is, by the way, a glaring deficiency in Apple’s 
DNS implementation, atKl ,s<Hnething tliiit will make many network 
adminislrators choose a different OS base for ilieir DNS services. 

'llie only real change in Server Admin here is tlie addition 
of a Seconciaj-y Zones tali, which makes setting those up and 
monitoring them a little easier. 

IP Firewall Service 

Tigers firewall has gotten quite a few upchrtes over Panther's, 
ail hough it is still Irased on IFPW. One change is semantic in 
nature, bul just enougli to make talking to SEtmeone remotely a 
[lit confusing is that wliere Pandier catkxl firewall entric.s “Filters", 


1'iger calls tliem “Rules". Same thing, different ixinie, \mi ju.st 
enough to drive you insane on a remote support call. 

Tile IJ! in Server Admin has changed quite a bit though. 
One change Is that Active Rules are no longer shown on the first 
screen of the Firewall section. Instead, you get basic statistics for 
die firewail opemiion. Active Rules now have their own tab. 

Selling up the Tiger Firewall is different as well. Tliere Is now 
a “Services” tal>, whic h contains prescis for the services that are 
running or can run on the .Server. Address gnnips now have their 
own scclion as w^ell, as oppexsed to Panther, which combined 
these two funciion-s in the "Genemr lah. The Services tab in Tiger 
lias far more entries, including explicit entries for Apple Remote 
Dc*skiop’s tAltl)) functions, Ixah 2.x and LX, as opposed to 
Panther, which only hts a default entry for ARD 1.2’s single port 
starting. 'Ibis allows administrators tfuick a<x:es,s to eniibling or 
disaliling various OS X .services with ease. One welcome addition 
is that n'unes Internet Radio streams have tiieir own entry^ (Ports 
42000A2W) TCP), .so allowing local network i'runes sharing bin 
di.sabling Internet R 2 idk) .streaming Ls a smij^. A new feature of the 
Services tab is that you cun create, edit, and delete Service entries 
in the GUI, soineihing that you could noi do in Panther. (You can’t 
do It with Tiger's Server Atlmin tcxjls again.st a Panther server 
eidicn) Tills allows you to add your own seivice entries without 
haviiig to d«) so in the “Advanced'’ tab. 

The Advanced tab hasn’t changed its basir: hmitioruility mude 
It’s sLill ihe pDce wheiv you circate very s|xx.ifu: nile-s for the 
fijewall. Tlie III does now show you which rules are kx'kal and 
nrX editable in llie GUI, a very welcxxiie change from Patuher’s 
“suq>rise“ mtxle for such things, 'Ihe otlier changes here are 
controls for “Stealth Mode". When enabled for TCP, IJDP, or bfith, 
a computer aUciripting a connection on a dased pon doesn’t gel a 
failure mes.^ge. Instc^ad the packets for tii;u |xm are dropped, ;md 
for all pradiol intents, you don’i exist, tliis is a nice addition to 
the security features of 1'iger, since if a serv^er LsiVt .seen it’s much 
harder to attack. Even a negative answer is a positive answei' if all 
you airc^ about is the answer's exLstenc'e, and not the ajntent. 
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One welcome addition j-s not in Server Admin, but in the 
doc'umeniation for Network Service.s under Tif^cr, where Apple 
gives you step-by-slep instRictions on how to reset your firewall 
track to the defaults, in case you did sonietiiing silly, like kill all 
external nelwork access to your server For a new admin, this is 
something they will need, and having ii documented is A Gfxxl 
Tiling, Another change that may or may not be welcome is the 
eliininaiion of the sample command line Riles from the IP 
Firewall Service documentation in the Nelwork Services manual. 
Tliey're still dtKumented, but arc now part of the newer 
command line reference manual. 

FTP Service 

Tiger's FT'P service Is, like FTP, esstmtially unchanged. The 
only "new” feature is that the FTP service enforces ACL sellings. 
Other than that, its wliat it was in Pantlier. 

iC^hat 

The iChat server is however, completely new to *l'iger, 
and has no analogue at all in Panther, so we don't have to 
cure about any changes. The iChai .server in llger is not an 
AIM server, but rather Jabber server, jabber is, according to 
the jabixu^ organization, (at http://wvvwJabber.org/X,7jes/ 
known as "the Linux of instant mms€iging" — an 
secure, adfme ulternatim to mnsumer iM services like AIM, 
ICQ, MSN, andYahoo. Jabber is also extensible, so, with a little 
work, you can use Jabber to talk to pretty much every IM 
network on the planet. 

Setting up the iChat server in Mac OS X is, for basic 
functionality, ridiatlousiy simple. You set up the Host domain, 
usually the DNS name of your server, set up a welcome 
mess;ige, and decide if you want to use SSI,. If you do, you 
select the certificate you vvatit to use, save yoLir senings and 
dick the “Start Service" button, I'hni's it, you're now an iCIiai 
server. Jablxrr supports all the Irasic IM functions, but not every 
client supfKirrs every function the &ime way. 

Out of the box, iChat in Tiger can (t>bviousIy) hook up to 
an iChat Server. As long as you have an account on the iChat 
Ser\'er, yt)u t^an log into the iCluit Serv'er. You just create a new 
Jabber account to tio so. When using Jablxr, tliere are some 
unique aspects of Ja)>lx?r to lx aw'ure of. First, your Jablxr 
userlD looks like an email addre.ss, and is 
shoriuscniame@ichatscriferj(4bi}erhostname So, if your short 
user name is jwelch and your iCliai setver name is 
jabber.maciech.cum, then the Jabber user ID is 
Jwekh^jabber.maccetUralxom, Since Jabber docsirt support 
Kerberos as a standard feature, and there are, as a result, not a 
lot of lablier clients that support Kerixrros, you on’t use tlie 
iChat Server in a single-signon environment. What this means is 
that when yoLPre setting up Jabber clients, wheilier iChat or not, 
youVe going to fiave to enter the password into that setup, even 
though it's the same password ycju use in Tiger Server’s single 
signon envirtmmenL 



Figure 3: iChat Server Settings 

Ancxlxr aiveat is dial if you use iChat, tlx* otily vei^ion of iChat 
dial supi'xxis the iCku server is version 3 0, so if you’re using an 
older versitjn tjf iCliat, you'll have to use a separate Jablxr client to 
talk to die iChat Server. Wliile the iChai Server supports using SSL 
lor security, it’s not all encT:i!iip4t.s,sing. Only die text ainversatious 
are encrypted. Your login session, file iraasfefs, jind any audio or 
video chats are not encryptal. So if you need an extremely high 
.set:urity setting for IM. yoLi're gt>ing to have to tio that work yourself. 

As I said Ixfore, not all JablxT clients support everjablier 
configuration the same. So .sorncTimes, even a really neat Jabber 
client won't work with every feature of iChafs Jabber 
iniplementaiion. For Windtiws and Linux, die client I found that 
worked the Ixst with the iChat Server was Psi, 
(http://psi.affinix.corn/). It was easy iti set up, and .supported file 
transfers well. PSFs interface is a hit texj K'Q-ish for my tastes, 
but it works well. Psi runs on Mac OS X/Wind(ws/Linux, so if 
you want a ''standard" envir()nmeni, it's an option. It supports 
GPG and PGP for file encryption, one way of dealing wiili the 
iChat Server's lack o{ security here. If you want a preuy client for 
Windows/UnuK, Gush, from 2entwine is an option. It doesn't 
sLipjTorl file transfer, but it's very pretty, which is always nice. 

For Palm device users, your best bet is Cliatopus, 
(http://Wwv\/. chatopus.com/), which .supporrs SSI connections, 
(1 wasn't able to test Chalc)j>us since I don't have a Palm device. 
However, anyone wishing to .send me a Treo 650, feel free to do 
so, and Fll happily test it fV)r you.) 

For Pocket PC/Wintiows Mobile devices, I found imov, 
(http://www.nnovsoftware.com/prodycts/imov/imov.htm) 
to l>e a gcxxi Hioicc. It works well with iChat server, atid in my 
tests on a .Sprint PPC-66()0, was easy to set up and use, althougli 
file Lmnsfer isn't suppcjried. This Ls probably not a major 
problem for most PDA/)imarTphone users. Tliere are a nunilx?r 
of clients for the Blackbeny and Symbian devices, Iml 1 have no 
idea about witich ones wcjrk lK*st, (Although like my Treo offer, 
if you w'ant to send me a BlackiSerry or a Sony p9iO/Nfjkia 93XX 
device, i’ll test it for you, no problem) 
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One thing the iChat Server doe^in’t do is autoinaiically log 
the contents of IM t:onvcrsiitians. This can be an issue for 
companies in this day and age of Sarbanes-0x1 tiy and other 
regulations. 'I’he only way 1 could fmd to dt) tliis is a third party 
plugin, Bandersnaich, from Funky Penguin, 
(http://vwvw.funkypGnguin.co.za/tiki-view_artECles.phph IFs not a 
dead simple seaip, but if you have the need, and some basic 
MySt^L skills, then it can log all iCliat Server conversations, ('ibis 
is one of those things that can l>e used for gtxxi or evil, but there 
are cases where it's necesstiry, and in ihai case, ytju eitlier use 
it, or don't use iChai Server.) 

Mail Service 

While not new in Tiger, the Mail Service hits been the 
recipient of a nunilx?r of changes, fixes and new features at 
alnicxst every level I wo critical new features are the integration 
of SpaniAssassin and ClamAV for anti-spam and vims tleteaion. 
While there are still no native Mac OS X viruses, and less than a 
handful of trojans, when you run an email server, you don't 
know whal platform i.s going to lx: connecting, so it’s better to 
have extra proiedion Itian not enough. Virtual Hosts are now 
supported in Server Admin, so you aren't forced to the command 
line for tliis. Ibis Ls something of no small importance to ISPs. 
Sieve scripting, for tTealing server-side tnail ailes is supported in 
Tiger, and even dtx'umented. While you could implement Sieve 
in Panther, you had to do it frojn third - party docuinentatian. 
Server niles are an important pan of enterprise mail services, so 
it was imponani that Apy^le do more for things like Sieve. 

For adininisiratois with large emiiil setups, yt>u can nt>w 
split mail stores across muliiple paniiions or even remote 
filesystems mounted kK:ally on llje server, so that a single hard 
drive incident dex^sn't tituse a loss of serv'ice for yotir users, or 
so you can load - balance the storage duties of user email 
Tiger’s mail service aLsf> suppons the new Service ACLs, so you 
can have belter control over who has access to the email service 
on any given server This can create some confusion as to what 
a given user can really do when you have separate user account 
settings in Workgroup Manager for mail access, Ibe simple rule 
of lliuml) is, if a user has email service enabled either in 
Workgroup Manager or in the Mail SACI, in Server Admin, then 
they have access to Tigt:r Server’s Email service. If you want to 
make sure a user dtiesn't have access, then they have to be 
denied access in Ixith foaitions. 

With I’iger, you now liave two options for email aliases. You 
can either use Woikgroup Managers ability to create login 
aliases and use those ft>r email aliases ttx), or create tliem 
manually in /etc/postfix/aliuse.s. The biggest difference between 
the two is that aliases created in Workgroup Manager won’i 
work with Sieve scripts. Yet Another New Tiger Email Feature is 
that you can now manage mail quota handling in Server Admin, 

Postfix, Cyrus, and SquirrelMail are still used for SM’l'P, 
POP/IMAP, and Webmail respectively, so there’s no changes 
to the rout servers that make up the email service Ixyond 
version numbers. 


The Mail service module in Server Admin has tjc^en 
redesigned up and down to give Mail administrators more 
power outside of the Command line. Along with tliis greater 
power, the Mail service dtxumentation has been extensively 
revamped and rewritten so that m;ii] administnttors can gel a lot 
more use from Reading Tlie Fine Manual Ibe mailing List 
seaion alone goes into more detail in its first seaion than 
Panthers documentation did for the entire mailing list entry, 
including solid information on what you use the web interface 
for as opposed to Server Admin, a welcome change and an 
importani improvement to Tiger Server. 

As Fve lieen noting. Server Admin’s Mail Service module 
has )>een extensively revamped, to give the GUI the kind of 
power that an email admin needs. Outside of new settings, 
tliea^'s a "Maintenance’’ panel that allows you to handle basic 
mail well, maintenance functions. So things like the mail 
database repair function can l>e run from Server Admin with a 
click. The Database iiih here also allows you to view basic 
information on all the mat! stores a server is using, (important, 
since Tiger lets you have tnultiple mail stores in multiple 
locations). Mail Queue management is another feature of Tiger, 
allowing you to view the current mail ejueues and either delete 
or retry messages that are having [problems. The Migration Tab 
allows yon to import any Mae OS X Server 10.1 or 10.2 mail 
daia[>ases from Server admin, giving you the option t>f migrating 
selecied users or every user. 



Tite Settings panel lias a metric ton of new cajxibilides, all 
aimed at making the GUT more uscTuL In tlie General tiLi, you cm 
now set tJic maO server to deliver to /var/niail when you turn off 
pop and IMAP services. 'IhLs am lie useful if you need to receive 
mail without delivering it, and not cau.se email to bounce. 'Ibe 
a>ntmis for enabling SMTP are also where you specify the domain 
and h(xst names for the email server. Along willi enaliling 
SMTP/POP/IMAP, you can now sepaiaiely start or stop mtoming 
and outgoing mail here. Tills is a real convenience far everything 
from troubleslKKJting to dealing with net^^ork congestion prolilcms. 
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The Relay lah is new, and has llie functions of the “Filters” 
tab in Pantlier’s Server Admin, With the separate anti-spam and 
anti-virus capabilities of Tiger, and the fact that the settings in iliis 
till) are more focused on relaying settings, arkling this tab just 
makes for a mt)re logical and more intuitive U1 for administrators. 

'Hie Filters tab is now where; you control your anti-spam 
and anii-vims settings. SpainAssassin's junk mail score setting, 
accepted languages, locations, what to do witli junkinail, how to 
handle it if you forward it are all here, llie Virus settings are 
pretty simple: Turn AV on/off, wiiat to do with infected email, 
and who to notify of infected email. You can also set the 
frequency of daily updates to your anti-spam and anii-virus 
databases here. Once a day Is probably the slowest you'd ever 
want to set this. 



Figure 5: Mai! Filters tab 

The Quoias Lah is a new feature in Tiger, and works with 
the Quota settings in Workgroup Manager, 'Itiis is where you set 
tilings like maximum incoming mcs,sage size, and how to handle 
users near tjuota or over quota. 

The Mailing List lab is unchanged, an island of familiarity in 
tlic newness of 'llger’s admin itxiLs, The logging tab adds detail 
level settings for the Junk Mail and AV features, along with Imer 
control of llie Itigging levels for SM FP logs and POP/IMAP logs. 

'fhe Advanced tal) is now split into three sections. The 
security section is where you set your autiientication methods 
for SMTP/POP/IMAP, and your SSL usage for SMTP and 
POP/IMAP. SSL usage now allows you to specify the certificate 
used, instead of just the Use/Don'l Use/Reqttire settings in 
Pantlicn Ttic Hosting section is w'here tlie Virtual Domains and 
Virtual Host settings are contained. Finally, the Database 
section is where you specify the mail database location, the 
main mail store location, and the location of any additional 
mail stores. 

Keep in mind that any command line options you used in 
Panther arc still there. None of the CiUl improvements are 
coming at tlie expense of the Ul, You just now have a better 
GLH to use along with the command line if you want. 


NAT Service 

Like Fl'P and AFP, Network Address Translation hasn't 
citanged much in concept or practice in a while. Ser\'er Admin 
in Tiger adds the convenience of l:>eing able to set the NAT 
service to just act as an IP Forwarder^ or to perfonn IP 
Forw'arding and NA'F 

NetBoot Service 

While Tiger doesn’t do anything radical to 
NetBoot/Netinstall, tliere are some small, yet welcome clianges. 
The nunilier of AFP connections lias been increased to whatever 
tlie resources on your server limit it to, nice for those 
,adminislnitors with high-powered setups. Network install 
images can now be created as tikx k - copy images instead of 
file - copy images, which result tn much faster iastallation 
speeds, Tlie previous c‘<nnmand-line only option for setting up 
images on remote servers is now a pan of the GUI tools. Images 
can now lie created with Uireaory Services settings configured 
in the image, so ihat as soon as the machine lx Kits, it’s 
configured correctly wiilioui needing to use the DHCP LDAP 
settings. (You could do tliis in Panther, but you had to copy 
/Library/Prefemnces/DtreaoryServices/ from tlie niacfiioe you 
were creating the image from to the image. In Tiger, this is 
integrateti into the toolset.) 

Since so much of NetBoot/'NetJnstall revolves around irnage 
creation, we should start with a look at the new features in the 
System Image Utility, fbnncrly the Network Image Utility. One 
tiling adminisiraiofs will notice right off is what's missing: 
Infonnatitrn on creating Mac OS 9 boot images. Considering 
how dead OS 9 is to A|)ple, along with the faa that Intel - based 
Mac:s can't nin Classic, much less Ikk>i OS 9, this is no surprise, 
but it iiieaas tliat if you still need to create new OS 9 install 
images, you should consider keeping a machine running 
Panther Server around. 

Tlie hdsk funaioas of tlie System Image Utility haven't 
changed, i>ut the imj>lementation has been expanded somewhat. 
You can now explicitly assign tlie proUKXjl to use to serve the 
image, although NF’S is the preferred method still. You c'an, as 1 
said earlier set up a mac hine as an image server and let Neifkxa 
serve from there. You iiave to create the image IcKally, and 
imnuaily copy it to the specified location, lint once it’s there, you 
can serve it fn>rn thc;re. While this would seem to make it an 
ideal candidate for an Xsan and a few front end Xserves, that’s 
not the type of use an Xsan's optimized for. That's not to say you 
physically cannoi do it, but you would reaffy wani to u^st this nut 
first before buying tlie gear. A new option for install images is 
the “(Change ByHost preferences to match client after instalP 
feature, which allows aclminislraiors to create ByHost 
preferences, (preferences tied to the Media Access Control, or 
MAC numlx^r of tlie imiin network interface card.) 'Hiis takes the 
ByHost of tltc image source, and wiien pushed down to the 
client, will change the preference to match the client. 
Consideriiig that preferences like siTeensaver settings, iTunes 
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settings, .Miic and Clas.sk: -settings, et al use Byt lost, this saves a 
lot of work on die bade end of the iastall For adrninismilors. 

One new nick that nite^ high on my list" is the Mode! 
Filter setting for both install and Ixxjt images- 1'his allows yt>u to 
tie an image to spedfie models of Mac. ^ITiis is very important in 
situations where you have different images for portables versus 
desktops. This avoids someone aeddentaliy or delilserately 
installing the wn>ng image on a type of hardware that you don't 
want it insUitlcd tjn. 



Figure 6: System Image Utility Model Filter tab 


Another prol>ieni that 7'iger make.s easier lo solve is naming 
imaged rnadiines. If you have to image a dozen or so machines, 
giving them all unique sharing names can l>e tedious, 'Vigor's 
Sy.stem Image IJlility gives you two options right in the U1 for 
doing ill is. If you want them all to have ihe same name, with ilie 
MAC address grafted on then you just enter that name (sans MAC 
address) in the "Computer Name** field in the '\Sharing Prefs" tab 
for Ixxn or install images. If you leave it blank, then they either 
get -AirrOMATIC- or DNS names from the network based on 
their IP address* You can also create a lalxieliinited text fite that 
has the desinjd name for each machine and tlic corresponding 
MAC address, and tell the System Image utility where the file is 
in die "Kile Path" field. When you image the machines, if ihey 
have a MAC address that’s on the list, they get the name you give 
them. If diey don't liave an address in die list, then they get the 
name from the setting in "Computer Name", 

Once youVe created the image, then you can use some of 
the new tricks in the Netlkioi .service to make managing them 
easier. One thing admincstrators love is information on t)ur 
servers. We love knowing all the details, and we hale having to 
spend a lot of time sussing them out. Server Admin in '1 iger 
does that for NetBoot far belter than Panther did. The first 
screen in the NelBtKn seivice tells you which images are 
enabled, and if the necessary protoc'oLs are running for each 
lyjie of image, tAKP/NH'S/HTnVDHCP). 

Monitoring NelB(K>t clients is easier with Tiger urn, as you 
get, in addition to all die into that Panther provided, information 
like die System Type of the client, handy if you have a couple 
thousand machines and haven’t yet memorized every detail t>r 
every system. 


'Ihe settings haven*i changed much. You (‘an set the 
maximum numlKT of AFP connections, you can have Ser\^er 
Admin l(x>k up MAC addresses for you based on the client's IP 
address or DNS name, and you am set the logging level. 

NFS Service 

'I'iger’s NFS service is generally unchanged from Panther's. 
If you want to do more dian mrn it on/off, select the number of 
daemons, and the connection type, you're going to need to use 
the coinniand line and iiecome one with the various NFS Ixx>ks. 

Open Directory Service 

'Ihere are many, many changes in Open Directory, 
especially in the areas of Windows integration, and they are both 
welcome, and needed. Open Directory is literally the heart of 
Mac OS X Server. Every service, every feature at some point 
deals with Open Directory, so improvements here ripple out into 
every other part of Tiger Server However, it's important to 
rememlier that Open f^irectoiy, (OD) isn't just one thing, Ks not 
like Microsoft's Active Directoiy, which is a single, allDeit, 
complex product- Open Direaoiy^ is more of a collection of 
teclinologies, integrated so that they all work together for Mac 
administrators. By default, Open Directory is primarily 
OfX"nl-DAP on a BerkeleyDB tialastore, with a Mfl' Kerberos 
Domain Coniroller for primary auiiieiiikaiion and Single-Signon. 

But OD is not just that. In fact, it*s really nothing more tliaii 
a container. LDAPv3, Nednfo, Active Directory, NIS, etc, are all 
jii.si jilugins to OD. Apple provitles a base set of plugins with 
Tiger, including: Active Directory, Api>!eTalk, Bonjour (nee 
RendezvoiLs), BSD Flat Files cS: NFS, l-DAPv3, NetJnfo, SIP, and 
SMB/CIFS* You can also gel a numiier of third party plugias that 
add feaOjres, like direct -supixirt for Novell’s eDiredory, or 
provide addiliona! features for things like Adive Directory that 
Apple’s plugins don't give yon. 

With Tiger Server, Apple has further refined Open 
Directory so that it provides not just improved features, but 
I Hater security as well. Improvements tnducle things like 'Frusied 
lDAPv3 binding, where not only does your system have to 
authenticate to the server, the server has to prove il\s the right 
server to your system, lliis is a critical feature, one that makes 
using directory services a much more secure proposition. With 
this, and the various features in Mac OS X 10.4 Server, .such as 
Kerberos signing and SSL encryption of Open Directory server 
communications to the client, doing filings like creating a bogus 
0|>en L^irectory Ma.ster is effectively impos.sil>le, since the server 
will 1^ unalile to authenticate itself to the client. (If the only 
auiheniiaiLion is client to sender, then creating a bogu-s server 
that can r(X>l your clients is mueli simpler. It's not child's play, 
but it gets a lot easier) Now, if you implement TnisLed binding, 
then you can't use the DHCP discovery of Open Directory 
Masters, but until there's a standard for trusted DHCP, tliai 
option isn't a great idea anyway. The only reason to use tlte 
DHCP Option 95 LDAP server discovery was so dial you didn’t 
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have to set up direaory binding.s on each client. However, since 
the new NetBoot/Netinstall features in Mac OS X 10.4 take care 
of this, that’s no longer as much of an issue. 

Active Directory inregmtion is much lietter, thanks not only 
to ACLs, but also to support for using AD info for home 
directories, and Ix'tter direaory information mapping [)etween 
OD and Active Directory. Along with that, many of the options 
for Active Direaory that were fonnerly only accessible via the 
ds<'onhgad command line tool are now in the UI. Binding a 
Tiger Server to an Aaive Directory realm is far simpler, and 
fmally gives you the benefits that it should have in Panther. You 
can store the LDAP scheme in the direaory for convenience, 
and improved replication. 

Looking at the new Direaory Access application, in 
/AppUcationsAJtilities/ iliere’s some obvious changes, mainiy die 
renaming of “Rendezvous'’ to “Bonjour’^, which keeps Tilxo off of 
Apple's Ixick, and still keeps the company's Frana>p!tilism firmly 
intaa. (Personally, 1 thought Aebiungf would have been better, but 
only if Apple also Ixmght the rights to “Hogan's Hems'’) 

Tlie Active Direaoiy plugin, now at version 1.5, as I said 
earlier, has had a GUI revamp. Options that were previously 
only settable or readable from the command line are now in the 
GUI, such as die mount style for network home Icxralions and 
wheiiier to force local liome directories. New options allow you 
to set the default shell for a user, more fine-grained control over 
attribute mapfiing, u.sing the UNC path in Active Direaory 
settings for a user to set the netwt^rk home directory location, 
and a much nicer UI for entering in Active Directory 
administrative grcjups. AppleTalk is still the same, and like 
txftire, only controls your ability to browse via Appletalk 
protocols. (AFP file transfer in Mac OS X 10.4 should be 
assumed to be AFP over TCP/IP only.) 

Active Oirectarv Forest: 

Active Directory Domain: 

Comooter ID: 

Unbind.., j 

Hide Advanced Options _ 

[ l>Kf Deperiewe e Maoptngs AOminiHfiiive 

Q Create moNIe account at login 

^ Require confirmation before creating a mobilt account 

[2 Force local home directory on startup disk 

G Use UNC path from Active Oirectoiv to derive network home location 
Network protocol to be used: smb: t 

^ Deliuli user shell: /Ikn/bash 


( Cancel ) f m j 


Figure 7: Directory Access Active Directory Settings 


The BSD Flat File and NIS plugin has rt^ceived only minor 
adjustments, but as I hilt is dearly a legacy technology to Apple, 
this isn’t surprising. 

Ron jour/nee Rendezvous Service DLsawery is now 
f^cniianently on in Directory Access. If you want to disable that, 
you can’t do il from the GUI. Note that this is not 
enabiing/di.sah[tng all the Zeroconf technologie-s that Bonjour 
encompasses, just the ability to find tHher Bonjour services. 

Given aU the changes in Mac OS X 10.4 Server's Open 
Directory infrastructure, one would expect that the GUI for 
LDAPv3 in Mac OS X 10.4 to have radically changed. But it 
hasn't, instead getting some minimal changes to improve 
usability and account for new features. Setting up an LDAP 
server i.s more automated, and the UI for opiion.s is dearer. For 
example the initiai screen wiicn you add a new server lets you 
set up SSL, aiuhentication and contact options right away. Tlic 
manual options have new features as well. 

New LOAF Connection 

Seiver Name or IP Address: 

G Encrypt using SSL 
M Use for authentication 
5! Use for contacts 

Manual /) f Canctl } Continue 


Figure 8: Adding an IDAP server to Directory Access 

llie ConnectitJii tali now lets you set rebind attempt 
periods and idle timeouts, and gives you the option to ignore 
server referrals, (Server referrals are where die LDAP server you 
connea to can tell you to kxjk on other L[>AP servers ft>r 
different infonnation. If you have a lot of referral.s or a wonky 
network, this can greatly increa.se your login time.) or use 
LDAPv2 in reatl only mt>de. 

The Search ik Maj>pings tab adds the ability to .save custom 
mappings out as a template .so you can get to iliem easier next 
time you need to. 

The Security tal) Ls new to Mac OS X 10.4, and incorporates 
the “Use autlieniication when connecting" option in Panther's 
Connection tab, but add.s in tlie new ojitions for the misted 
binding options. Within the new Security Policy options, you 
can avoid rogue LDAP servers compromising your network. Ihe 
new options are: 

• Disable dear text passwords; 'Ibis one's obviou.s. It means 
that you can't use unencrypted pa.sswords to communicate 
with the ITIAP server. From a security POV, this one should 
lx a default. 

• Digitally sign all packets (require.s Kerberos); If you are 
iLsing a wide area LDAP implementation, this option Ls 
critical. It allows you to ensure that the packet you get is the 
packet dial was sent, unmodified ant! unmtilested. IF the 
packet is changed enroute, then the digital signature will lx 
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wrong, and tlie packet won’t be accepted. This option 
requires that you use Keii^ertxs. 

* Encrypt all packets <requires SSL or Kerlx^ros): Again, fairly 
obvious, and goes along with disal^ling clear text piisswords- 
Tills ensures that all data ix^iween client and directory server 
is encrypted. 

* Block ninn-m-ihe-niiddle attacks (requires Kerberos): 'ITiis 
option works with the digital signing option to prevent 
someone from setting up a rogue server posing as an LI3AP 
domain controller. 

Note thill you can override any of these options at U)e server 

level, which Is always a good idea on a managed network, 

O O 0 _ QO OcNn ain _ 

Coungction Search & MaoQjftgs Senritv ' 

Acc»« (o Directofy___ 

Us« auth^rtticaiiQn when cofincctmg 
Namu 
Passwoid: 

SeturSty Wicy ___ 

^ Ok^l« dear text pas swords 
_ DigiUlty ilgrt J-U packtti {requrrts 
_ En-crypi ski paduts («qijlr«s SSi m Kaftwftji) 

^ Block man-iflH the-middle atiadti (requires Kedseroi) 

Sefver capatHkiiii and r«dui/efncdts deicr^nfnc The avaN'aiNiETv of oprtons- 


( c»"«< J r ott -) 

_ ^ 

Figure 9: Directory Access LDAP options 

1 know that some of you are thinking “Well, I’ve got a really 
gO(xl firewall, why should I worry?” FiiewalLs aren't magic. For 
example, do you require every maciiine on your network to 
meet a specific security profile before it can use your network? 
If .so, how do you force tliat? You can do this with Window's, but 
Mac OS X suppon for this kind of thing is still as yet 
unimplemented. A single badly configured machine inside the 
firewall on leave you open to attack. Firewalls also don't do 
much alxjuL tiisgruntled/paid off employees. 'I his is not to say 
that firewalls are not good, useful things, l>ut that they are only 
a pan of a good securiiy policy. Avoiding unencrypted, unsigned 
data imnsmissions wherever possible only enliances your 
security, and gives you additional layers of protection. 

Server Admin has new features to make a Mac adminLstrator 
smile as well, 'fhe Log tab in Server Admin's Open Directory 
settings in Mac OS X 10,4 Server adds in the kadmin kdc kerbeios 
logs, a Password Scrvic:e Replicatiem log, and slapa)nfig log. 'Itiis 
helps answer one of tlie mexst fnestrating things aljout Miic OS X 
10.3 Server. Ijogs are the best way an administrator lias to 


trciuljleshtxit problems on tlieir network. The faa that Mac OS X 
10*3 didn't log Kerberos - specific events by default was one of tlie 
most faistmting things about that version. Kerberos 
irouhleshcKXing can l>e extremely tricky on a good day, and no 
logs are not the way to a good day by any definition. There's also 
a *seafth/spodiglii window built into the Log tab, (indeed, it’s in all 
tlie log tabs in Server Admin), which allows you to filter a log for 
specific conditions. Another new, and very welcome application - 
wide change in ServcT Admin is the inclusion of the path to the log 
you're viewing, so if you want to k.>ok at a log outside of Server 
Admin, finding tlie specific log file is much simpler 

The Arcliive tab is a new Mac OS X 10.4 feature for Server 
Admin* It allows you to quickly back up and restore (3pen 
Directory Master settings, including: 

• LDAP directory database and configuration files 

• Open Directory Password Server database 

• Kcrlx-Tos database and configuration file.s 

• Local Netlnfo domain and shadow password database 

Thi,s is designed as a supplement ui using a pfO(>er Open 
Directory replica setup, or in cases wliere replicas are not 
pos.sible or practical* 

Tlie Settings lab has gained new c’apabUilies, particularly 
with regard to security and joining oilier directory systems. In my 
tests, joining a Windows 2000 Active Directory realm wa.s a three 
or four - click process in Server Admin, and about 3 minutes in 
Directory Access and you were done. Once youVe finished that, 
it just works, no fliss, no muss, with far less pain than Mac OS X 
10.3, and thanks to new Windows features and ACLs, you get a 
much nicer level of integration than ever before. Tlie 
“Authentic'ation” pane in Settings is now ""Policy, and has three 
sei:ii(>ns. 'Hie “PoUty” section is much the same as it was in Mac 
OS X 10.3. Tlie binding settings are about the same as in 
Direaory Access, however they will override client Directory 
Access settings. You can also disallow binding if need lx:* Finally, 
llie ‘'Security'’ pane allows you to set various security methods* 
Before you go .shutting things off or turning tiungs on here, yoifU 
want to be very careful to make sure that you aren't accidentally 
killing access for clients dial can’t use the settings you want. A 
network that can't be used may lx? secure, but it's also useless. 
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Figure 10: Open Directory Server Policy Settings 

One final noie: Apple has released a new Open Directoiy 
manual i\m cioeks in ai over 242 pages. Bven if you liave l^een 
running Open Directory for a while rcttcl it» take notes, 
annotate the PDF, A couple ibys of planning in this irmnual, and 
lire txlier manuals available on tlie Mac OS X 10.4 Server 
Docunientaiion page can siive you months of pain down the line. 
1 also bi^hfy urge you, if pos.sible, to take Apple’s server classes, 
which should already be updated for Mac OS X 10.4. They aren't 
cheap, but the lime you save will more than make up for tlie cast 
of the class wiiliin months, which is not a Ixtd ROl at all 

Print Service 

Considering that Mac OS X 10.3 Scrvef.s print service was, 
to lx? kind, sulxiplimal, almost any improvement in Mac OS X 
10.4 is welcome, Tlie big news i,s that instead of ignoring CUPS, 
(version 1.1.23 in Mac OS X 10.4 Server, from Mac OS X 10.3 
Server's LI.20) at all bui the lowest levels, ala Mac OS X 103, 
Mac OS X 103 Server is integrated witli ClJPs pretty much from 
to to lx)tlom. This pays off in a nutnlx?r of ways, such sharing 
via IPP and better logging, (the CUPS logs are actually useful 
now). You am set cover sheets in Server Adiiiin, (although 
custom cover sheets still rec]uire some work in CUPS, to create 
custtrm sheets and get them in the right spot.). 

Anotlier bonus to liavtng tlie print service l>eiier integrated 
with CUPS is that it makes it easier t(> CtT^S for the settings that 
Server Admin or the Apple command line tools don't handle. So, if 
you want to go beyond what Server Admin gives you, or you want 
to use different CUPS features, it's a much nicer lime to do so. 

There’s still a couple of annoyances here, such a.s the only 
sup[)ori for autlienticated printing in Server Admin is still only via 
SMB. You am do autlienticated printing with CUPS and IPP, but it 
should txj in die Server Admin UT ttx). Adding shared printers and 
cjucues CO Open Directory is still a manual operation, which is 
puzzling. Using Open Directory to manage printers is something 
that .should lx* automatic. 'Ihe printer entries should lie created as 
you set them up in Server Admin. Ojien Dircaory Prinftirs have to 
be LPH queues, anollier annoyance. Bonjour printing is LPH only, 


however, finding IPP printers .shared by Mac OS X 10.4 Sender 
from a Mac OS X 10,4 client is pretty bmindead, (Tliey show up 
in the Printer Brow'ser tli^it come-s up wlien you dick "Add" in 
Printer Setup Utility with a t:onnection tyjie of "'Sliiired Printer"), so 
it's not as big of an annoyance as it could lx. While you can't auto- 
downlcrad Windows client print drivers by default, setting this up 
is pretty straightforward (and I go twer it in the Windows Services 
section), so Mac OS X 10.4 is a mucli nicer Windows client print 
server too. The IT in Server Admin hasn't changed noticeably, 
other than the aforementioned Cover Sheet and IPP additions. 
Mtxst of the changes here are undei- the surface. 

QuickTime Streaming Service 

Wliile there are a tun of changes in Quic kTime itseif hence 
(QuickTime 7, tlie QuickTime Siroaniing Server tools having 
changed as much from Mac OS X 10.3. Tlie biggest changes are to 
reJlect new features in QuickTime, such as H.264, MD Streaming 
and 3UPP femia.'s. The Serv'er Admin U( is about the s^mie as in 
Mac' OS X 10.3» as Ls the QuickTime Streaming Ser\^*r Web UI. 

QTSS PiiblLsher has had .some wiirk done on its UI, mostly 
to support ease of use and user home directory streaming, ‘there 
Ls one big change, and it Ls not only welcome, but fits the 
workfiow of QI'SS Publisher i>erletlly: AppieSciipL. QTSS 
PulTisher joias Server Admin and the Gateway Setup Assistant as 
the only server administratian applit'aiions from Apple with 
AppleScript implementations, and QTSS Publisher's is by far Lite 
Ixsi thought-out and most useful. Hiis ts a refashing change 
From the first generation AppleScript dictionaries seen of late from 
Apple, (I'm thinking of Keynote and GarugeBund in panicular), 
which are masiiy read - only, and ol’ not a great amount of real 
use. Ihe Q'l’SS ITiblislier dictionarv' Ls lull-featured and looks to 
have Ix^en crc'aied by folks who not only know w^iat Apple3t*rtpi 
can do, but have used AppleScript themselves. Tlie terms are 
exj>lalned, and kxiking at Uie oliject model in Script Debugger's 
browser, it kx>ks dean and neat. Gcxid joti folks! 



Figure 11: QTSS Publisher AppleScript Dictionary 
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Software Update Service 

Hie First thinjj that must lx- said aliout die neiA' Soltwait \ Jpdatc 
scTV'ioti is Ix^st quoted fitxn ditr Mac OS X 10.4 Server dcxinnciitation: 

Note: You can't use Jioftware Update sermte to pmvtde 
third-party sojhvure updates. 

The second thing that iiiusi l>c said atout Software Update 
service, aLs<j from the Stiftware lJ[)dute servicre dcKiimentation: 

You can't 7?iake }f(mr emm Software Update packages, tor 
security cotisideratiom and to prrdect attackers frotn faking 
packages, the Software Update package instaiter mm't instad a 
package unfess Ws sigtied Apple. In addition, Sofiivatv 
Update service wiil imrk only with the new package format 
suppin ted in Mac OS X Sen^tr viO.4 or later 

The rigln or wrong of these items Is ixsi teft to debate 
elsewhere, but as of Mac OS X 10,4,0, Software Uj>daie service 
is only for Apple Software Updates, and only for software 
u|xiales using ihe new Mac OS X 10.4 package format created 
by and signed by Apple. 

When you connect to Apple's main update servers with 
your own Software Update service ,server, Apple tloes collect the 
following data from your server: 

• language 

• Tyi)c 

■ Browser 

So Apple’s n<it doing any deep, evil data mining on your 
Software Update service sender. Having ,said that. Software Update 
service is not useless by a long shot. If you have 100 machines, 
or even ten machines, a way to easure that your clients only gel 


the updates you apprt)ve and don't all liave to go out t>n the 
Internet to get them is A Good Thing. Yes, you can do this witli 
Apple Reiiurte Desktop, hut tliat's a manual prtxess, and doesn't 
allow you to assign Software Uprlate service servers to specific 
clients. It also allows you to belter c'ompensate for revoked 
U[xlates, dial Apple may pull for a variety of reasons, since those 
packages aie not presented lo users. So, while Software Upilate 
service isn't everytliing, it's Ixner than nothing. 

Clients must be ninning Mac OS X 10.4, which is a bit of 
annoyance for system administrators who wea* hL>ping to use this 
withotit having to upgrade tlieir clients to Mac OS X 10,4. As well, 
you’ll want to think about cap^idty planning well, since pushing 
out a S()MB u[xiaLe to 500 clienLs on a KKIMB line will make your 
network cry. If you liave a large number of clients, you'll want to 
consider multiple Software Ujxlate servke servers, and use 
Workgroup Manager to assign groups of clients Lo specific servers. 

Looking at Software Update service in Server Admin, you 
have ihe Overview' Tab, which allows you to see the currenl 
stanjs of Software Update service, such as last check, the 
number of updates that are Mirroredor copied and stored 
locally for clients, and the numlxT of updates that are Enahied, 
or made available to clients. You also get the status of the Auto- 
Mirror and Auto-Enable fimaions.'l'he Log tab sliows you the 
current contents of the Software Update sendee log. 

Tlie Sellings tab has mo parts. The first part, ‘'General” 
allows you to enable or disable automatic mirroring and 
auuuTiatic enabling. Note that tiie auto-enable is a binary selling. 
Ifs on or off, there's no “only on for some updates". You can 
limit bandwidtli Ixiwecn the Software U|>date .service server 
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and client Macs, and you specify the port you’re going to 
provide tlie updates on Itere as well, llie “Updates" tab shows 
you the updates you are currently mirr<jring and tlieir status. 

I will agree that Software Update service is not a complete, 
full solution for Hnterprise fl' needs by a long shcH, but it can help 
you manage Apfde updates a lot better tJian was previously 
possible. Tliat’s a win, even if it isn’t everytliiiig it should be. 

VPN Service 

Tins lias not changed by Imge amounts from Mac OS X 10.3 
Server. In Mac OS X 10.Ts Server Admin, there arc new options 
for LT2P, such as being able to user MS-CHAPv2 or Kerberexs 
Authentication, and you set I he IPSec authentication options ft>r 
L2TP to either .shared secret or SSL Certificates. PPTP is 
unchanged in Server Admin. Logging and Client Information 
options remain unchanged from Mat: OS X 10.3 Server. 

Web Service 

Unsuqirisingly, the web .services in Mac OS X 10.4 Server have 
tlieir sliare of ujxlaics, die mtxst obvious one Ixjing die new 
Weblog funciionaiity, Ixasc'c! on Blojsojn, die java - based wd:>log 
software. Tile weblog service gives you fue and (bigei weblog 
sclup, however, if you’re lex iking for something dial gives you 
point clit'k fimtlionalily on a par with a standard Blojusum uxstall, 
or MovableTyjx:, you’ll not be terribly liappy with Mac OS X 10.4 s 
implementation. But, if you’re Itxiking fora weblog that would lx: 
good for smaller children, t>r you want a simple, basic weblog, then 
Mac OS X 10.4’s weblog is great for ihiiL One thing that is 
important to note if you plan on hosting multiple sites from a single 
server If you turn on weiilogs, diey’re on for etmy site (m)Jtmr 
senier so Ix^ c^areful diere. Finally, using the Weblog service with 
clients like ecio is far more tediotis to set up than it should be. 



There are new authentication options for Apache, mo.st 
notalily Kerberos via Microsoft’s SPNEGO protocol. So you can 


now user Kerbenxs authentication for not ju.st wcl> i)ages, hut for 
realms as well. SSL support in Mac OS X l(>.4 Server supports 
SSLv2, SSLv3, and ’LLSvl, although not every other application Ls 
guaranteed to support these versions. The primary version of 
Apache in Server is at 1.3*33. Apache 2 is provided for resting, 
in /opt/apache2/. Like every oilier service on Mac OS X 10.4 
Server, Web Servit es support SACLS. 

As we noted earlier, SSL certificate handling is better at all 
levels, including web services. Tite way tiiat Apple has made 
using SSL in the various services in Mac OS X 10.4 Server will 
make the use of more secure websites much more prevalent 

The j>erformance cache is slid in Mac OS X 10.4 Server, liut 
has changed its l>ehavic>r somewhat, in diat you no kinger have 
CO keep port 16080 open, since Apache in Mac OS X 10.4 Server 
handles die performance cache a litde more gracefully. If you 
need to use SSL or Keep-Alive, you can’t use the perfonnance 
cache, and any rcc|ucsi ct^ntaiaing cookie headers will not have 
its response.^ cached. You'll also want to disable the cache for 
any .site's with WebDAV enabled; as it can conflia with uploads. 

You on set up search pages in Mac OS X 10.4 Server tltat 
cm talk to Sp«>digiil, While Spotlight is disal)led by default on 
Server, you can turn it on by ciianging the Spotlight line in 
/clc/hostconfig from SPOTLIGHT=-NO- to SPOTLIGHT-YES-, 
dien start the SfKXliglu metadata process with sudo SystemStarter 
start “MetaData Search", or restart the Server. From there, you 
have to set u]:» the searches for die .site/pages, but tliis i.s all 
cxi:)lained in the Web Technologies Admin Guide from Apple. 

WebMail in Mac OS X 10.4 Server is still SquirrelMail, 
version T4T, 

Server Admin hasn’t diangcd much witli Mac OS X 10.4 
Server, mostly just to handle some of the new features. The 
"GeneraU area in the Settings now has controls for Allow 
Persisleni Connections, so you t:an set the niimlx^r persistent 
connections and their limeouLs. The ''Weblogs" area has aU the 
settings for the Weblog service, which oasist of: Cnable/Disable 
Wefdogs, set the Default 'Iheme, set the Weblog folder, and die 
Email domain for emails generated !iy the Weblog(s). Like 1 said, 
it’s there, and it’s tMisy. Sophisticated it ain’t. 

Tile "Sites” area lias liatl the most changes overall. The 
Options pane now has a sixtific Server-Side Include (SSI) 
setting, and the order has changed. As 1 s^tid earlier, realms can 
now iLse Kerberos authentication, whicli also requires SSL, and 
lids is in Realms pane. 7'he Security pane has changed to rellect 
the new SSL integration, like everything else in Server Admin. 
Finally, the Aliases [lane now has difTerent settings for Web 
Server aliases vs. URL Aliases and Redirects. 

WebObjects Service 

The WebObjects service is in Mac OS X 10.4 Server, 
although WebObjects is hardly new to Mac OS X. Since all this 
.service does is control the WebObjec'ls application server, there’s 
not much to do with it in Server Admin, nor woultl there lx, since 
Wel’Objects is more the realm of Xcfxle. You t:an get an overview 
of whar’s g<dng on with Web(!)bjects if it’s running, and you can 
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set the ports dun the WeliObjetls Monitor, jintl the wotaskd 
process run on. You otti iiLso enable/disable die monitor, 

Windows Service 

In a stunning surprise, nothing has changed for Windows 
services..mo, Tm lying, but rni also running out of ways to say 
‘*'lliere’s Ixxat a lot of changes to <service>. But, once again, 
there's a lot of new features in the Windows Services in Mac OS 
X 10A, and they're stuff that I missed dearly in Mac OS X 10.3^ 

For sysadmins who aren't using Active Directory, but 
want to migrate tlieir domains off of Windows NT 4, Mac OS 
X 10.4 Server supports Backtip Domain Controller, CBDC) 
functionality along with the Primary Domain Controller, 
(PDC> functions in Mac OS X 10,3 Server. Tliis requires you, 
(somewhat obviously) to set up the PDC Mac as an Open 
Directory Master, and the BDC Mac(s) as Open Direcuiry 
Iteplicas. All the information is then stored in Open 
Directory's LDAP store. One thing to note here, since this is 
for NT4 dt>malns, not Active Directory realms, you have to 
deal with NetBIOS name restrictions for your network. 
Machine names should be no more than 15 characters, no 
special characters or punctuation. This is also a good polity 
for SMB shares in an NT4 domain. 

Mac OS X 10.4 Server is now able to be an Active 
Directory member server with greater ease and better 
reliability dian before. As I mentioned in the Open Directcjry 
,section, the setup for this is much simpler and more reliable 
than in Mac OS X 10.3 Server, and thanks to the ACL support 
in Mac OS X 10.4 Server, dealing with permissions is far 
simpler. Tlianks in Apple using Window,s - compatible 
semantics in Mac OS X 10.4 Server, you can change ACLs from 
a Windcjws box, a plus for t>eople managing AD networks 
with Macs. Thanks to ACLs, you can Fmally have nested 
Windows or Mac groups with access to a share or service, and 
not run into Unix permissions prt>b!ems, or the 16 - group 
limit that Unix permissions forced on you. As with the other 
services in Mac OS X 10.4 Server, you can also use SACLs to 
resirici access to the service itselF. 

Mac OS X 10.4 Servers file locking is improved, so if you 
enable stria locking for any SMB shares, you should be able to 
avoid st^me of the file locking issues tliiit were a problem in Mac 
OS X 10.3 Server when you had (K‘ople hitting the same file wiiii 
different protocols. While Mac OS X 10.4 Server does support 
opl<H:ks for SMB shares, you .should only use tliose if Windows 
clients are the only machines tliat will lx? using tliat share. 

On the auLlienlirafion side, Mac OS X 10,4 Server now 
support.s NTLMv2 and Kerlx^ros for Windows clients. Tr also 
supports using Kerberos for Macs accessing other Windows 
shares, so Mac OS X 10.4 users get Single-Signon for SMB loo. 
As we'll see, you can force NTLMv2 and Kerberos 
auiheniication For clients connecting to Mac OS X 10.4 Server, 
but you should he atreful of doing tliat if you have older 
Windows boxes, since you have to be running Windows % or 
greater to use N'l'LMv2 ik Kerl)eros. 
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$49.95 - download free denno at PDFpen.com 
A/so available: PDFpen Pro for creating fillable forms 
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Figure 13: Windows Access Settings 


the ,'>lYare name in WGM for SMB sharing, a.s this is 
hardcoded inio Windows 2000/XF for this function. 
Make sure you set up the proper ACLs for it, at least 
l^iving Domain and EnLer|^rise Admins full ctYntrol. 
Tliis ts one cuhq where you really want to S:)e one with 
ACLs, it will make life much easier for windows tisers 
and administrators. 

4* Create the fcjllowing subciirectories in princt in WGM 

a. W32X86 for NT/2000/XF 
h. WTN40 for 9X/MH (Note: TIk* procedure Tm 
detailing only works for Windows 
Niy2000/XP clients. You can set it u[> for 
9X L:lienis, but it‘5 muc'h more tedious, 
and those machines arc a bigger 
hindrance than a lielp anyway) 


One benefit to all of this is that using Mac OS X 
10.4 Server to host roaming proffles, the Windows 
version of Mac OS X 10.4 Server\s mobile home 
directories is much easier than It was in Mac OS X 
103 Server* One caveat with roaming profiles: if 
you're going to use them for Windows clients, you 
have to be rather hard-nosed about profile size 
quotas. With Windows, a Roaming Frofile 
downloads to the client on login, and upk>ads from 
the client at logout. If you have a large profile size, 
(mine Is about a GB and a half or so), login and 
logout on anything hut a very fast network can take 
a long, long, long, lime. Enough to where people 
will think something crashed. Watch your sizes on 
roaming profiles. 

As before with Mac OS X 10,5 Server, Mac OS X 10.4 
Server is able to act as a print server for Windows boxes, 
and can even provide automatic driver download for 
Windt>ws clients, so tht 7 don't have to worry about 
installing drivers when priming to a Mac OS X 10.4 
Server print queue* While the basic documentation is 
available on the Samba sile. as it turns out, doing this in 
Mac OS X 10,4 Server is a good deal simpler dian the 
Samba howtos show^: 

1. Add the printer you want shared to Mac OS X Server 
via Frinter Setup Utility 

2. Share it out in Server Admin via IFF and SMB 
(Win2000 and later can use IFF loo, but SMB Ls 
much easier tt> use here for a number of reasons* 
IFF i.s just better for your Mac clients, but if you 
won't have any needing to get to this printer, then 
you can just use SMB) 

3* In Workgroup Manager, (WGM) create a share with an 
SMB name of print$* It must have that exact name as 


5, From a Windows 20()0/XP mud line, navigate to the 
"Printers and Faxes” share on the Mac server, and 
select “Properties'" on tlie printer you want 

a. Wlien asked to install the driver select “No" 

b. In the Advanced tab, click “New' Driver.,*" 

c. Run the Add Printer Driver Wizard (note, if 
run from an XF machine, this only installs 
drivers for NT/2()00/Xl^, NOT 9X) 

d. 4lie drivers actually install into the “3” 
siibdimctory in the W32X8{i directoiy (There’*s 
a long explanation of wliy, has to do with 
earlier versions of NT print drivers living in the 
kernt4. In Windows 2000 and later they aren't* 
This IS all handled automatically for yt^u. ) 

e. Configure the standard settings on the 
primer Note that device settings will be pre¬ 
set this way, but not print job settings, even 
though you can set them here. 

6. Add the printers to the clients cither via the printer 
wizard, or just connecting to them in “Network 
Flaee.s". 

'fhal should do it. You can also publish OS X 
Servers printers in Active Directory' via the Active 
Directory tools, a good idea, since it allows you to fUst 
search AD for iliem. (AD's prinier search is preUy 
weak, hut thaVs MS*s problem) One reason why 1 
recommend ACLs here is tliat iheyTe a lietter way to 
lock clown atx'ess to a printer, and you can do this from 
AD tools, which are still a lot nicer to deal with than OD 
tools. As with computer and share names, w'alcli the 15 
- character limit for prim share names* 

As far as Server Admin goes, there aren't a lot 
changes* The Overview’ tal> no longer shows you the 
logging status* In the Sellings tab, the “General" panel 
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adds an option to set tip your server as a BDC, and 
shows you the name of the Active Directory realm if 
youYe joined to one. The “Settings" pane now has a 
selector for Aurhentication options: NTLMv2 & Kerberos, 
NTLM, and LAN Manager. You can select these in any 
combination you need. 

Xgrid Service 

Xgrid is Apple's implementation of Grid 
Computing. Grid computing is a lot of things to a lot 
of people, but at it's heart, it's just a way to split a 
task or group of tasks up between multiple 
computers. Xgrid is not, liowever, a magic "Make it 
faster" spell. The job has to be designed for multiple 
computers to work on. 3-D Kendering, ala Pixar is 
an example of a job type that can benefit from 
Xgrid. Burning a DVD is an example of a job type 
lliaL won't benefit from Xgrid, Grid computing is 
very big in ihe scientific community, where jt^bs are 
easily set up to benefit from Xgrid or similar 
implementations, (SETr@Home is an early grid 
computing implementation.) 

Within Xgrid, you have a controller, a client, and 
an agent. T'he client submits the task to the controller, 
which tlien parcels out the job to a grid, which 
contains multiple agents. (Yes, you probably could 
have a single-agent grid, but whaPs the point?). Apple 
has two pieces of software that ship wath Mac OS X 
10.4 Server to help you with Xgrid. The first t.s ihe 
Xgrid Admin utility, the management utility for your 
grids, which allows you to set up a machine as a 
controller, and control which grids run which jol>s on 
which agents. Note that while you can have multiple 
grids run by a single controller, you can only have an 
agent in a single grid at a time, and a job can only run 
on one grid at a lime. You also can’t move an agent 
between grids wdiile it's running a job, nor can you 
move a running job between grids. 

To avoid problems with rogue agents, there are 
three levels of security in Xgrid. The highest is 
Kerberos authentication, which uses Open Directory’s 
Single-Signon to handle aiilhcntication. Then there’s 
Password, where you set a single password on the 
agents, and then set up the controllers and the clients 
with that same password. There's also no security at 
all, but that's a bad idea for many reasons. Many, 
many, reasons. 

Within Server Admin, the controls for the Xgrid 
Service are pretty simple. The Agent Tab allows you to 
set up the server as an agent, decide how you want to 
pick your controller, and which controller to connect 
to if you’re picking a specific conirolier. You can al,so 
set how you accept tasks, and what type of controller 
authentication you want to u.se. ’i'he Controller tab lets 


you set up that server as a controller, and set up the 
client and agent authentication types you want to use. 

You can have a single server acting as an agent 
and a controller, (and a client too, for that matter), hut 
it’s not a great way to gel maximum performance. 
Note that job submission is done by the xgrid 
command line utility, but if you’re u,sing Xgrid, the 
command line Is not going to be anything to worry 
about. 

Conclusion 

If you think this is it, well, you're w rong, but unless 
you want this issue of MacTech to be the "John C. Welch 
Memorial Issue", well end this month’s column here. 
Next month, wee’ll lake a look at Mac OS X 10.4 Server 
from the Workgroup Manager POV* 
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A look at what's new in REAL Software's recently 
released update to REALbasic. 

By Will Leshncr 


REALbasic 2005 Is Out 


R!*AL Software recently released an all new 
version t)f REAlJ>asic calle<l REALbasic 2005, and you 
might be wondering what all the hiss is alxjuL 
REALbasic 2005 was first announced at REAL World 
(REAL Software’s annual REALI)asic developers 
conference) in 20(H, and it was finally released in 
June of this year Ii sports an entirely redesigned user 
interface, new controls, additions to the REALbasic 
language itself, and a new ‘'Rapid Release” shipping 
schedule that promises a new version of REALbasic 
every 90 days. 

To really appreciate s^)me of the things I’ll iie 
talking alx>ut, you'll want to run REALbasic for 
yourself, If you don't have a license, you can 
download the REALbasic demo from the REAL 
Scjftware website. 

New IDE 

Made With REAI.ba.sic 

With the release of REALbasic 2005, REAL 
Software hasn’t just redesigned the REALl^astc IDE, 
they have also rewritten it in RKALi>asic. The IDE 
itself is now the best examjde of a made with 
REALbasic application. Tliis alone is a great step 
forward for REALbasic, l>^cause il means lliat the 
REAL Software engineers are now fulltime REALbasic 
dcvelo|5er, and they will now l^enefit from the 
improved efficiency that working in REALl^asic 
provides. Tliat means feaaires shtjuld be quicker lo 
implement and should appear in releases mcjre 
quickly. It also means that tlie REAL Software 


engineers will experience tlie same bugs and design flaws in 
REALbasic as ilieir customers, making it much m<ire likely that 
fixes will appear sooner, rather than later. 

All-In-One Window 
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Figure 1, Albm-oiie project window. 

The most obvious change to the REALhasic IDE is the all- 
in-one project window (as shown in Figure 1). Ibis change inay 
take some getting used to, but it has several advantages over the 
old multi-window approach. I'irst, the new IDE is a joy to use 
on Windows, [f you haven’t had a chance to use older versions 
of REALbtusic on Windows, you may not lae aware of some of 
the f)roblems, but there were several and they affected 
productivity substanliaEy. One problem with the old JOE was 
that it used floating windows for l30th the controls palette and 
the properties editor. While a floating window approach worked 
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well on tlie Muc, it didn'i work weU on Windows, where the 
flouting windows would figiu with the muin IDE window for die 
focus. The main window itself was also a problem on Windows, 
it was an MDl-style window dial severely limited a developer's 
ability to switch from one code or layout window to anodier. 

Another feature of the new‘ IDE's one-window approach is 
that it simplifies having more than one project open at the same 
time. A serious limitation with the old IDE was its inability to 
open more than one project at a lime. Developers managed to 
work around lhal limitation through tricks, such as having more 
than one copy of tlic REAlbasic application running at ihe same 
lime. With REAlbasic 2()05, sucli tricks become iiniieces,sary, 
lx:cau.se ripening multiple projects Ls fully supported by the IDF. 
Furthermore, iiaving multiple projects open ai die .same time is 
easy to manage for developers Ix^cause each project is fully 
contained within its own window. 

IDE As Web Browser 

The REAlbasic 2005 IDE iiKxJels itself on a tabl^ web 
browser. In a web browser, you visit web pages. In the 
KKALbasic 2005 IDE, you visit editors. Each editor ytiu visit in a 
projcti can he thought of as a lcx:aLi<jn, just as the different weh 
pages you visit in a web browser can be drought of as locations.. 
in the REAlbasic 2005 IDE, you can jump directly to a Icxraiion 
u.sing the Location field at die top of every project window. For 
example, if you wanted to jump directly to the Open event of 
the App object, you would type App.Open in tlie ljtH:aiion field 
and iiit return to liave tlie IDE lake you direedy to die code 
editor for that event. Also like a web fjrowser, as you visit code 
editor locations, the IDE will rcmeml:>er where yooVe lx:en. You 
c^m move back and forward through the locations you have 
visited by clicking the biickward and forward buttons in the 
IDE's main irxilkir (see Figure 2), 

1^ App.Open Or I 

Figure 2. Browser-iike project navigation controls* 

If you find that there is a particular location you visit a lot, 
you can set a Ixxikmark to that kx^ation. Choosing a liuokmark 
from the Bookmarks menu opens the location for dial 
IxHikmark. Btxjkmarks are global acnxss all projects, which 
means that you can select a Ixx)kmark for a location in a project 
lhal isn't open, and the IDE will automatically open die project 
and lake you directly to the location in tlml pR>jecl. There is also 
a favorites bar, located below the main toolbar, into which you 
can place bookmarks that you use a lot. The booktmrks in tlie 
lxx)kinark,s bar are local to a project and will not show up in 
other projects. 

Tabbed Editors 

Most of your time using the REALbasic IDE will likely be 
.spent in the main content area, kxated below the main toolbar 
and the favorites bar. llie main content area is tablied, with each 


iocation you visit contained widiin its own tab (see Figure 3). 
One of the advantages to the new tab!>ed interface is the ability^ 
to quickly switch from one location in a project to another 
simply by clicking tabs. If you need U> see two locations at the 
same lime, it Is possible to open anotlier project window for the 
current project by chcx>sing New Window from die File menu, 

/ O) Froiea / F~^Wimiowl ^jMcnuBarl 

Figure 3. Project tabs. 

Most tub focafions have the same basic structure. At the top 
is a bar of buttons for cotmiion actions specific to that [Xirticiikir 
loaition. The Profea tab, for example, has buttons for adding 
classes, modules, and menu bai^, to a project. A code editor tab 
has buttoas for adding meilicxis, properties, events, and other 
code elements (Figure 4 shows the menu editor toolbar). Below 
the command Bar Ls the main content area for die uth. The look 
of the taiin content area will depend on the type of Utb. Tfie 
Project tab contains a list of all the clas.ses, windows, mcxlules, 
and other elemenLs cxintained witliin tliat [orojeci. A cxxle editor 
tab contains a list of all the methods, properties, events, and 
Ollier ccxJe elements for die item Ixring edited, together witli a 
code editor pane for editing those items. A window' layout tab 
contains a pasteboard for editing a window, a list of contnils to 
add to the window, and a properties erlitor for editing die 
properties of the window or the items contained on that window. 

MA’ c? Add Mefjy Arfd Wer!u Item Add S«p^rator 3^ I 

Figure 4. Menu editor command bar. 

Redesigned Editors 

Most of the editors in REALliasic 2005 have been 
redesigned, and perhaps the biggest change is the way the new 
window editor works. Tlie old IDE's window editor lotiked, and 
in many ways acted, like a real windtiw. 'Ihere were, however, 
sevenil prt>b!ems with editing a wdndow dial itself acted like a 
real window. First, every class instantiated directly on the 
window had to be contained within the window itself. Some 
classes, like Timers and TCFSockets, are not really controls and 
do not appear in the III of the running appliottion. The 
presence of these non-controLs during the design phase tended 
to cluticT the window, and generally got in the way when trying 
to position and style those elements chat really were cxintrols. 
Another problem with the old window editor was dial you 
could never design a window chat was laiger than your monitor. 
If you had a small monitor and a laige window, you were 
forced to play games with the position of the window in order 
to design it. lastly, there was a problem with the old window 
editor on Windows that had to do with maximizing all the 
windows in the profect. Ifocau.se a window editor was just 
another window as far as Windows is concx?rned, it would get 
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maximized along with all the other windows, which was clearly 
not the desired beliavior. 

new window editor in JtEALbasic 2005 fixes many of 
ihe proljlems of the old window editor. The window being 
edited is now contained within a pasteboard, and you can drop 
objects anywhere on the pasteboard, not just on the window. 
So, for example, if a window is to have a I'imer on it, the Timer 
can l)e placed on the pasietoard, next to the window, keeping 
it outside the Lxmfines of the window itself. Also, the pasteboard 
has sLTolll>ars, which means that you can edit a window of any 
size, regardless of the size of your monitor. Finally, the new 
w^indow editor solves the problem on Windows where tlic 
window l>eing edited is treated iike a real window. Ihe window 
is actually just a picture in tiie IDE, so Windows won't maximize 
it in imfonunatc ways. 

In addition to the window editor, the code editor has also 
gotten a face lift in the new IDE. Tlie most obvious cliange is 
the addition t>f guidelines to show yoti which code blocks 
l:)elong together. Tlie guidelines are especially useful when the 
code in a method has several nested blocks and the code itself 
is a bit ifK) long to all fit on c^ne scTcen. The lines make it 
immediately obvious which End If goes with which If. The lines 
also server a functional purpose. Clicking a line selects all tlie 
text in that bkx:k. 

Most Improved: Scarcliing 

Perhaps one of the best feaaires of tlie new REALbasic 
IDE is its vastly improved .searching options. There is still a 
traditional find dialog, from which you can find and replace 
text throughout a project. New, in the KEAt.basic 2fK)5 IDE, 
however, is ihe ability to perform regular expression and 
whole word searches. Search really shines, liowever, when you 
do a Find All. All found items are displayed in a separate 
search tab. Double-clicking an item in a search tab brings you 
directly to the location for that item. Bui you don't have to 
leave the search tab in order to replace some or all of the 
found items with new text. At the bottom of each search tab is 
a field into which you can type replacement text. To perform 
a replace, aiJ you have to do is type replacement text, select 
the items in the list of found items you want to replace, and 
click the Replace button. 

You do not need to visit tlie Find dialog in order to search 
for items in a projea. Tliere is a .search fiekl in die main toolbar 
of the projea window into w'hich you can tyjx^ text to do an 
instant search. A popup in the search field lets you set the scope 
of the search to the entire project, the current item, or the 
current method. If you are running Mac' OS X Tiger, then you 
get one more option that is really ctx)l; computer. A computei' 
search uses Apple's new' Sfxnlight technology to .seardi all the 
REALbasic projecTs on your aimputer for a given search term, 
in order to use this option, you will need to download and 
install REAL Software's Spoiliglit plugin for REALbasic. Once you 
do, you will be alile to perform lightning-fast searches of all of 
the projects on your Mac. As with any search, tlie results wall 
appear in their own search tab. Double-clicking one will 


automatically open the project for that item, if the project is not 
currently tipen. 

Customizable IDE 



Figure 5. A customize dialog. 

Tile new REALbasic IDE is much more customizable that 
the previous versions. For example, every toolbar you see can 
l>e customized. If you don't like a particular ccjmmand button, 
you am remove it. if you don't like tlie order of the buttons, you 
can rairrange them. Some command buttons aren't even visible 
by default. Add Binding and List Bindings, for example, are two 
cnmmand.s you might like to have easy access to that also 
happen to liave liuitons associated with them. By default, 
window editor Uxillxirs don't include thase to buttons. To add 
them, just bring up the customize dialog for the window editor 
tcxilbar (showm in E'igure 5) and add either or both of them. 

Ihe only dowaside lo RFAUiasic 2005',s toolbai' t:usU>mizatiQn 
prcx:es.s is that you need to lx kxiking at a ttKillrar in order to edit 
it. It may not cxx'ur to you thaJ sr>me Uxiibars (.'an be etlited. The 
deliugger loollTar, for example, lacks a Run bum>n, but you can add 
a Run button ti.stng the debugger's toollrar txlitor. You must be 
Rinning in die debugger in order to access that editor, however 

Much More 

I’ve only scratched the siirfacxr of all of the new features to be 
found in the REAlBasic 2005 IDE. In addition to those things Eve 
already mlkerl alxiui, tliere is also a totally new Language 
Keterence, a new debugger, file type sees, and code refactoring 
ux)ls. I’ll leave these new tealurcs h>r you to discover on your own. 

New Language Additions 

The IDE isn't the only tiling to get new additions in 
REALbasic. The REALbasic language has had a few additions to 
it as well, and all of them are welcome. Here are a few of the 
more exciting additions. 

Declaring Variables 

It was once the case that REAL]:>asic required ah variable 
declarations to appear at the top of a method, before any other 
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code. 1 liat restriction was relaxed in REAliiasic 5 so that a Dim 
sLilemeni coutd appear anywhere at the top level of a method. 
Now, in REALI>as[c 2005, variables can be declared inside blocks 
as well, And, as you would expect, the scope of such a variable 
is the block itself’ Which nieans tliat die following silly code, 
while illegal in REALbasic 5, is perfectly legal in REALbasic 2005: 

dim X as Inie^er = 2 
If X “ 3 then 

difli y as Integer “ 4 
K = y 
end if 

Another addition to the Rt'ALhtisic language having to do with 
declaring variables Ls the ability to cteclaie the loop varial>le of a for 
statement directly in die .stalcmt'nt itseif, as this code demonstrates: 

for i as Integer ^ 0 to lO 

j = J ^ i 

next 

New Static Keyword 

One diing sorely lacking tn RE^ALbasic is class properties 
and class methods. As in C++, static properties and methods 
would l>e shared by all the instances of a class. They enable 
class instances to cxxjrdinate their behavior, and they also make 
the Singleton design pattern a possibility (you can fake 
singletons now in REALbasic, but you can't get the compiler to 
enforce diem for you), REAtJhasic 2005 doesn't introduce static 
property and class methods, liui it does introduce Static as a 
keyword of the language and diat gcLs us half way to static 
properties and melhcxls. 

Static is used like Dim to declare variables in a method. 'Ilie 
difference is that variables declared Static persist across calls of 
die method, and their value is shared by all callers of dial meiluxl 
(in other woids, Static work,H in REAlhasic the way it works tn C), 
Static variables can declared in module meiliod or class 
melliod. Stiitlc: variables in class method ate static to die meiliod 
and not to any particular in.stanc:e of that methtxL Which nieans 
that every iastance of the metliod sees die same static variable. 

,Staiic variables declared in methods of a class can lx.- used 
by instances of diat clas.s to t:ommunicate with each other. One 
common example is keeping running total of all of the instances 
of a class that are currently in existence. Tilings are a little tricky 
because the static variable is private to the method in which it is 
declared, so we can't really define a cluster of support methods 
around one .static variable. Instead, what we can do is create one 
metliod to which we pass commands for acting on the stadc 
variable. In the case of an insumce count, we would need 
commands for incrementing the count, decrementing die count, 
and reluming the count. Our fmal method might look something 
like the tbllowiiig: 

private function InstanceCouiUtaCmd as String) aa Integer 
static count as Integer 
dim result as Integer 

select case aCmd 
case “INCREHENT” 
ceunt = count + I 
case "DECREHENT" 


count = count - I 
case “GET“ 

result = count 
end select 

return result 
end function 

To use InstanceCount, we would simply need to call 
InstanoeCountf INCREMEMNT") in die consiaictor for our class, 
and lnstanceCount(‘DECREMENT"} in its destructor. We could 
also provide a public method for getting the instance count that 
would just return InstanceCountf'GET'). 

Soft Declares 

AiKiilier very useful new feature in REALbasic is die ability 
to create soft declares. Declares are a way to call a ftinaions in 
shared libmries. 'fhey are commonly used to get at platfonn- 
spedfic funedoms of the operating system that are otherwise 
unavailable to pure REALbasic code. 

fJp until RHALba,sic 2005, a function specified in a declare 
was hard-ccxled in the executable and resolved when die 
application launched. If die OS couldn't figure out what shared 
library and funaion a particular declare referred to, then the 
application would fail to launch, hi REALbasic 2005, it is now' 
possible to make a declare "soft'', which means that the declared 
function is not resolved until runtime. A new 
IsFuncdonAvaitable method has also been added to the System 
object. IsFunciionAvailablc makes it possible to determine, at 
runtime, whether a function specified in a declare is or is not 
available, and take action accordingly. 

An example may help to clarify the issue. HI use a silly 
declare to make the but I hope you can see how the 

idea c:an extended to other, more interesting declares. 
Imagine we are writing a custom control and we need to 
know the system’s double-click lime in order to handle 
double-clicks properly. There is a Carbon funciian called 
GctDbiTimc that will return that number, so we dutifully 
constmet the following declare: 

Declare function GetDblTiEie Lib **Carbon*’ {) as Integer 

At which point we decide to lest things out, so we run the 
project, 'lliere are two possible outcomes, depending on 
whether we are building a Mach-O application or a PEF 
application. If we are building a Mach-O application, our 
application will launch and the above declare will perform 
correctly. If, however, we are building a FEE application, we 
will get an error dialog at applic'aiion launch telling us that the 
Oirhon shared library could not be found. That is because the 
PEF loader doesn’t know about a shared library called “Carteif; 
as we have identified it in the declare above. The PEF loader 
does know alxjut a shared library called “Carbunlili", and if we 
had consiaicted the above declare using “CarbonLih” inste^td of 
“Carixin", then our PEF applic.ation would launch correctly. 

A soft declare solves this problem. It defers the re-solutir^n 
of the ""Girbon" shared library to runtime, iastead of load lime. 
Furtliennorc, it is die REALbasic framew^ork that does the 
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resolving nnd not the PEF loader, so tt can l^e a bit smarter about 
handling a declare to ‘"Carbon" in a FEE application. Turning the 
alx)ve declare into a soft declare is as easy as adding tlie Soft 
keyword to the frt)nt: 

Soft Declare Function GetHblTlme tib ‘'Carbon'* () as Integer 

Amazing as it may seem, simply adding the Soft keyword 
resolves the entire PEF versus Macl>0 problem, 'the declare 
will now function correctly in both kinds of applications. 

Soft declares solve a whole host of problems. On Linux, 
for example, there is a particularly nasty problem having to 
do with declaring to functions in LibC. On many distributions 
of Linux, LibC is really jusi a linker script for gcc that tracks 
down the real LibC shared library. Before REALbasic 2005, it 
was necessary to constaict declares using a path to Lil)C 
itself, which resulted in code that was decidedly non¬ 
portable. Furthermcjre, you'd have to know where LibC lived 
on the particular distribution of Linux on which you were 
planning to run your application. Soft declares solves this 
problem as well. In REAlbasic 2005 all you have to do is 
create a soft declare to ‘"LibC" and then REALbasic resolves 
the real location for you at runtime. 

New Controls And Classes 

In addition to a brand new IDE and additions the REALbasic 
language, REALbasic 2005 also comes with several new classes 
and controls ihai developers can add to their bag of tricks. Ill 
cover a couple of them here* 

HTMLViewcr 
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Figure 6. HTMLViewer on Mac OS. 




Fife EdtE I 

|Hlpc/AnaolBdicaii | I Ga 1 1 


/VUCIKH 

UteiDumii/ of ifactitoBh reebnoifo^ 

1 Magazin* In Print . 

. tAbout MucTech 

;i»Hamei>.qe ' Click for Brc 

H ►Subscribe 'j' Around tl 

►Submit A Tior L . 

B ^Get 0 copy of 'jf, 

^ MacTeth RISK , v 


Figure 7. HTMLViewer on Windows. 


REAlbasic developers have long wished for a built-in HTML 
control and in REAlbasic 2005 that wi.sh has i’jcen granted. The 
I'lTMLViewcr uses the default HTML rendering technology on 
eacli plaifonn. On Mac OS, that technology is WebKit, on 
Windows !i Is Internet Explorer, and on Linux it is Mozilla. 

1 was lucky enoogli to lx: atiending WWDC when Apple 
Hr.st announced Wcl)Kit. I regally enjoyed the web-browser-in- 
three-steps demonstration that the Apple engineers j^erformed 
during several of the sessions 1 attended. Now, that same 
demonstnition is possible witli REAlbasic, and the result is a 
web browser that runs on Mac OS, Wimlows, and Linux. It 
doesn’t take much to whip up a web browser in REALlrasic 2005. 
In fact, it only Uikes one fine of ctxle. To 1>egm, start with a 
blank desktop projed. Drop an U'l'MLViewer control, an 
Editl'ield, and a PusliBiitton onto Wintlowl. Then, in the Action 
event for FashBuTtonl, add this c<Kje: 

HTMLViewerl^LoadURi EditField1.Text 

TliaCs all there is lo if* Run the project, enter a URL into the 
edit field, push the button, and start browsing. Figures 6 and 
7 show the resulting web browser running on both Mac OS 
and Windows* 

ContaiiierControl 

Before REALbasic 2005, if you had a set of controls that 
worked rogerher a.s a group, and you wanted that same set 
of controls to appear either in different places on the same 
window, or in differeni windows, then you had no choice 
but to recreate ihe exact same set of conirols in each place 
that you needed tliem to appear. Tliat probfem is solved in 
REAlbasic 2005 with the inirodnciion of the 
ContainerControl. A ContainerCtmtrol acts a little bit like a 
window in that you design one in a window editor. But 
instead of appearing as a separate window, a 
ContainerControl is attached to another window, either at 
design time, or in code at runtime* One ContainerControl can 
be attached to any numlier of windows, in fact, you can even 
embed one ContainerControl inside another 
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ContainerControl. Furthermore, ContainerControls arc first- 
class citizens in REALbask. You can attach properties, events, 
and methods to them in order to encapsulate iheir behavior 
in the ContainerConfroI itself, 

There are a nunil>cr of ways that ContainerCoiitrols can l>e 
used to simplify the creation of a complex user interface. For 
example, creating resizable panes becomes almost trivial wttit 
ContainerControls, By Icxrking the bounds of each contn)l 
contained within the ConlainerConia>l appropriately, it is a 
simple matter of resizing the ContainerControl iLself to get the 
effea of a resizable pane. 

"" —□ 9~ 

( Cancel ) ( OK ) A 

— —Q □ 

Figure 8. ContainerControl with two buttons. 

Let's work through an example to .see how 
ContainerControls can be used to easily solve a tricky 
problem. AnybcHdy who has ft ad to create cross-platform 
dialogs is well aware that the order of the OK and Cancel 
buttons as they appear in a dialog is different on Windows 
and the Mac. In order to have the buttons appear in the right 
order on each platform, it is usually necessary to write custom 
code in each dialog's Open event to take care of switching 
the buttons to the right order, depending on the platform. 
With ContainerControls, however, this becomes a simple task 
that can be solved once and forgotten. Start by creating a new 
ContainerControl in an empty project. Onto the 
ContainerControl drop two PushButton.s, changing the 
Caption pnrperty of one PushButlon to OK, and the other to 
Cancel It is necessary to arrange the buttons in the proper 
order for one of the platforms on which the application will 
run. In Figure 8 T have arranged the butons in Mac OS order. 
The next step is lo place code in the ContainerContrors Open 
event TO switch the button order when the application is 
running on Windows (the buttons are already in the right 
order for the Mac). This requires a #if conditional compilation 
directive, as follows: 

#if TargetWin32 
dim bp as Integer 
bp “ CancelButton.Left 
CancelButton.Left = Okflutton.Left 
OkButton.Lsft = bp 
Undif 

The Final step is to place liie ConiainerC<jnirol inside of anotlier 
window, where it can be instantiated when the window is 
created. Figure 9 shows what this might look like. If you now 
create Windows and Mac OS version.^ of the app and run tliem 
on their respective platforms, you should see the OK and Cancel 
buttons appear in their correct positions for each platform. 
Furthermore, the ContainerControl we created lo solve tliis 
prol^lem is reusable. We can drag it to any window^ or dialog box 
to get the exact same effect. 



Figure 9. ContainerControl on a window. 
BinaryStream 

In addition to new controls, REALbasic 2005 comes widi 
several new cla.s.ses, as well as additions to existing classes. One 
addition that is particularly welcome are extensions to the 
BinaryStream, BinaiyStreams are used to read and write binary 
data in a file. That hasn't changed in REALbasic 2005. What has 
changed is that Binary Streams can now' be used with 
MemoryRlocks and Strings a.s well The trick to getting a 
BinaryStream to use a MemoryBIock or a String is to pass a an 
existing String or MemoryBIock to a BinaryStream when 
constructing one. For example, lie re is how^ you would create a 
BinaryStream that operated on a MemoryBIrK’k, instead of a file^ 

dim ntb as MemoryBIock 
dim hs BinaryStream 
mb = new HemoryBlQck(O) 
b£ = new BinaryStream(mb) 

A BinaryStream tliat has l)een created with a MemoryBIock 
can f>e ttsed just like any other DinaryStream. The difference is 
that instead of reading and writing data from a file, the 
BinaryStream will read and write data from a Me!m>ryBlc>ck 
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instead. In the past, when I needed a memory-based stream 
class, I wrote il myself. But tlie new REALbasic implementation 
is much iTetter tlian my home-grown one. Because BinaryStream 
Ls the stream class in all ca,ses (MemoryBlock, String, or file), 
code can be written that reads and writes BtnaryStreiims diat 
never has to know that the underlying data lives tn a 
Memoiy^Block instead of a file, Tliat means more general code 
that can be reused in interesting ways. 

REAL SQL Database 

One new feature in REAIiiasic 2005 that is of panicular interest 
to me is the addition of a new single-user daLalrast^ engine leased on 
SQIitc. In case you havent heard of ii, SQUie is a powerfuJ and 
speedy SQL database engine with a growing user base. In fact, 
Apple has included SQLite in Mac OS 10.4 and provided access to 
it through its new CoreData technology. By chtxising SQLite, REAL 
St)ftware lias guaranteed thal RHAUrasic developers will liave actt^ss 
to a state-of-the-ait, high-performance database engine. 

Access to the SQLite database engine is tiirough the 
REALSQLDatabase class. The REALDaialra.se class still exists for 
backward compatibility, but it has been deprecated, and REAL 
Software suggests we move to die new database engine as soon as 
possible. TIic API for die new RHALSQLDatalxise class is exiicnJy 
die same as that of the REALDaiabase, so moving code over to the 
new database should lie as easy as finding eveiy^ cKcurrence of 
REALDataliase and replacing it with REALSQLDatabase. It will be 
necessary to conven any existing damlrases, how'ever. 71ie HEAL 
SQL Database only understands SQLite databases (and only SQLite 
3 databases, if diitc means anything lo you). REAL Software 
provides a conversion utility on their website to convert databases 
made with the REAL Database into REAL SQL Databa.ses. 

The .strength of SQLite is its speed, robustness, and aliility 
to handle a wide range of .SQL syntax. If you are looking for a 
way to have both a Icxral single-user database and a remote 
multi-user database in the same application, then the REAL SQL 
Database is definitely w^orth a look. By taking advantage of 
REALbasic's Database clas.ses and the database engines that 
support them, it Ls possible to talk to several different databases 
at once in die same application. For example, you could create 
an application that talked to a MySQL database if it is available, 
but fell back to a Itjcal REAL SQL Database when access to the 
MySQL database isn’t available. For the most part, you could 
even feed exactly the same SQL to both dataliase engines, 
making the transition tietween the two seamless. 

New Platform 

Before REAUiasic 2005 was released, it was |x>ssible to run 
the REALbasic IDE on three platfonns; Mac OS Classic, Mac OS 
X, and Window^s. REALbasic 2005 loses one platform, but gains 
another The lost platfonn is Mac OS Classic. Wiiilu it is still 
possible to liuild Classic applioiions, tlic REALl)asic II^E itself is 
not supponed on that platform, in exchange for Classic, we get 
Linux. Although it has yei to go final, l^AL Software Ls currently 
conducting on open l>eui of the Linux IDE. REAL Software has 


also announced that the Standard version of the Linux IDE will 
be free. 1 have to admit that Vm not as familiar with Linux 
development as 1 am with Mac and Windows development, but 
now tliat there will be a development IDE that I am already 
familiar with on Linux, Fm looking forward to adding Linux to 
the platforms I am support with my strftw^are products. 

New Release Schedule 

As if REALbasic 2005 and all of its exciting new features 
aren’t enough, REAL Stsftware has also announced a new release 
schedule to go along with it. In the past, new major versions of 
REALl>asic arrived anywtoe from six to eighteen months apart 
from each other. This created a problem for both REAL Software 
and REAIJiasic develo|>ers. For REAL Software, the problem was 
thal w'iiile their engineers w^ere ftiriously coding die next major 
release, they were also maintaining the ciiiTent release. As with 
all software, REAL Software periodically released mainLenance 
releases of REALbasic in order to provide l>ug fixes to 
developers waiting for those fixes. Maintenance releases would 
contain l>ug fixes, and occasionally minor features, bui never die 
big new features dial were being prepared for the major release. 
Somedmes a particular bug fix wa.H uk> risky to ship in a 
maintenance relea.He, so it, and the developers waiting for it, had 
to wait for the major release. 

REAL Software's new release schedule is liased on a rapid 
release model in which a new version of REALbasic will ship at 
least every 90 days. New releases will included both bug fixes 
and new features. With this new rapid release model, there will 
no longer l>e a need to maintain one release of REALbasic while 
working on the next release. Upcoming releases are always lx)tli 
the niaintenance release for the cunent version, as well as the 
next major release with new features. 

With the new rapid release model comes a new way to buy 
REAUiasic. lastead of jxiying to upgrade REAUrasic at every major 
release, developers will pay once for all the ujxlates in a given 
(leriod of time. New lic'en.se.s include six months of updates. 
Upgraded and renewed licenses mclude twelve monihs of updates. 

Conclusion 

As you can see, there is plenty tliat is new in REALbasic 
2005. The big change, of course, is the new^ REALbasic IDE, but 
almost every^ aspcri of REALbasic lias somediing new to explore. 
If you haven’t yet given REALbasic a try, you .should. REAUiasic 
lias always been a grxxl i<k> 1 for developers to have in their 
toolbox. With RFAi.l)asie 2005, that tool got even better. 
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APPLESCRIPT ESSENTIALS • by Benjamin S. Waldie 


Working 


Wrra Tex] 

r 

M A jr hen writing AppleScript code, many of the things that yon 
will automate will involve working with and manipulating 
" " text in some manner. For example, you might need to write 
a script that will retrieve text content from a FileMaker Pro database, 
and then place that content into an Adobe InDesign document. You 
may need to maintain a text-based log file of your script’s activity 
during processing, or you may need a script that will extract content 
from email messages, and write the content to files on a server. 



During this month’s article, we will 
ciiscuss a number of ways to work with text, 
including ways to break text apart, search 
text, and read from and write to files. 


string. Because of this» thn?ughoul tliis article, I will luse the term 
string when referring to text. 

clasfi of ('"This is some text" as text) 

“> string 


About Text in 
AppleScript 

Much like a scriptable application in 
the Mac OS, die AppleScript language itself 
jx)ssesses classes and commands. These 
classes and commands are considered to be 
the core language of AppleScript, and are 
used, interspersed with application and 
scripting addition terminology, to make up 
your scripts. For a detailed overview of 
AppleScript's core language, you should 
refer to The AppleScript Language Guide, 
which is available through Apple’s 
Developer Connection at 

httpy/developer.apple.com/documentation/ 
AppleScript/, 

In AppleScript, text is considered to be 
a class, and is synonymous with the class 


Just like classes in applications, AppleScript core language 
classes can possess pniperlies, A string possesses a length 
property, which may lie used in order to determine die number 
of characters contained within the string. For example: 

length of "This is some text" 

-> 1 ? 

Manipulating Text 

When working with a string in AppleScript, one of the 
diings diat you wUJ probxtbly want to do is to manipulate it, or 
break it apart in some way. For example, you might need to 
write code that will parse a tab-delimited file, extracting field 
information. Once broken apart, it can be repurposed, merged 
back together in various ways, and more. 

Elements of a String 

In AppleScript, paragraphs, words, characters, and text are 
ail considered to be elements of the class string. Because of 
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this, a string c^n be broken up in a number of different ways. 
'Ibe following examples show sofne of the ways that a string can 
be broken up by referencing its elements. 

The fallowing example code will retrieve a paragraph from 
a speciricil string: 

set theT&jtt to "This is pacagraph I of soaie teJtt. 

This in p^jr<igraph 2 of some text." 

set theParagraph to paragraph 2 of theText 
“This is paragraph 2 of some text." 

The following example code will retrieve a word from the 
string specified alK)ve: 

word 3 of theText 
"paragraph" 

Ibe following example axle will retrieve a chantcler from 
the siring specified ateve: 

character 9 of theText 

-> “p" 

You may also chotjse to retrieve multiple elements of a 
string at once. Hie following ctxie wiU retrieve a sfXTified set 
of characters from the siring sfx:L‘ified above: 

characters 1 thru 9 of theTexL 

-> "h“. "1**, "H*, " ", "i", "s", “ ", "p"l 

When reirieving elements in tills manner, you will notice that 
tlie result is pn>videcl as a list. When retrieving words or 
paragraphs in this manner, a list may suffice. However, when 
retrieving characters, you may jirefer a string instead. To retrieve 
a list of diaracters a.s a siring, you could ayercc liie retrieved list 
bjtck to a string. You could also reference the text element of the 
.string, rather than the character element. For example: 

(chiiractera I thru 9 of theToxt) as atriag 
> “This is p" 

text 1 thru 9 of rhoText 
"This is p" 

Using the Offset Command 

At times, you may need to deieraiiiic die fcx:ation of a 
specific character, word, or string within a longer string. While 
tills could lx* accomplished by using a repeat statement to loop 
through tlie diaracters of the string until the .specified search 
string is found, a more efflcieni way would l>e to use die offset 
cxiinmand. 'the Offset command is included In tfie String 
Commamis suite in the Stand 4 tr£i Addiliom scripting addition 
that is installed with Mac OS X. 

set theFileNatne to "fllenarae.jpg" 

offset of in theFiieName 
9 


A.S you am see from die example code above, the 
offset command will return the po.sjiion of the first 
instance of a specified .string within another string. With 
this value, you can tlien retrieve specific parts of die 
string. For example, the following .sample code will 
extract the prefix before a specified chaiacter in the string 
that we used aixive. 

text I thru (offset of iu theflXe^amo) of 
theFlIeNamt^ 

—> **£ileOflniB. “ 

Note in ihe example above, that the extracted 
prefix actually contains the delimiter character. Again, 
I his is because the offset command will return the 
actual p().sition of the first instance of die specified 
siring. In order to extract the prefix without the 
delimiter, then you must subtract 1 from the offset. 
For example: 

set thuPrefix to text 1 thru {(offset of in 
ifaeFileN^eJ - 1) of theFileNatiiB 
"fllenane" 

You may also add 1 to the offset, and extract text 
from that location until die end of the string, in order to 
retrieve the .suffix following the deliiniten For example: 

set theSufflx to text ((offset of iir theFiieName) 

+ J) thru t of theFiieName 
‘■jp fi " 

Again, the offset command will return the position 
of only the first instance of a speciried siring. However, 
what if a string contains multiple delimiters, and you 
want to break the text apart based on the offset of die 
last delimiter? To do this, you can extract the characters 
of the siring in li.st format, then reverse diem asing the 
reverse property of a lust. Next, you can change the 
reversed characters back to a string, extract the prefix 
and suffix, and then reverse them back. This sounds 
complicated, liut it can actually be done in only a few 
lines of code. 1lie following example axle will walk you 
through die prrxress. 

This example code will extract the characters of 
the string: 

set theFtluNaniB to “file.uaine. jpg" 

SGt ihBChuracters to characters of tfieFlleName 
-> l"£", "i"* "1"* "e"* "n", "a", "m". "e”, 

"i’. ‘p". "g"l 

ITiis exaiiiple code will reverse the extraaed charaaers: 

set theReversedCharacteru to reverse of theCharacters 
-> i“g"* “p", "j"* “e"* "la". "a", “n", "e", 

"1". “i", "f"i 
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Tliis example code will convert the reversed chanicters 
back to a string: 

set tbeReversedFileNatie to theReversedCharacters as etrlng 
“gpj*fiaan*eilf“ 

This example code will locate the delimiter in the reversed 
string, using the offset command: 

set theOffeet to offset of in tbeRevetsedFileHame 
-> 4 

This example tx)de will retrieve the prefix and suffix from 
the reversed siring: 

set theReversedSuffix to text 1 thru {theOffset - 1) of 
theRe versedFi 1 etlame 
-> ‘gPj^ 

set theRevarsedPrefix to text CtheOffset f L) thru -1 of 
theReV e r s ed Fi1eM ame 
"> “eiiian.ellf“ 

This example code will reverse the extracted prefix and 
suffix l>ack to their original fi>rmr 

set thePreflx to (reverse of fcharactera of 
theReversedPrefix)) as string 
-> “file.niUie'' 

set theSuffix to (reverse of (characters of 
theReversedSuffix)) as string 
-> -jpg* 

Now, you should have the pro^x^rly retrieved prefix and 
suffix. The example code alx^ve could aaiially have lx*en 
written in a more condensed fashion, k was intentionally 
written in a verbose manner for demonstration purposes. For 
example, the following code will perform the same funciion, hut 
has been condensed into fewer lines of ctide: 

set theFileHamc to file*name*jpg'" 

set theReversedFileNane to (reverse of (characters of 
theFlleRaffle)) as string 

set theOffset to offset of “** in theReversedFilename 

set thePteflx to [reverse of (characters (theOffset + 1) thru 

’1 of tbeReversedflleNameJ) as string 

set theSuffix to (reverse of (characters 1 thru (theOffset ^ 

1) of iheteverEedFileKame)) aa string 

Another thing to niXe wljcn working with the offset command 
is that in some cases, you may attempt to gd the ofiset of a ^string 
that dcx:s not exist with the string you are evaluating. If this txwrs, 
Uie offset command will relum a value of 0, For example: 

offset of iti "filenatie" 

“> 0 

As you begin using the offset command, lx? sure* to add 
code to handle this type of situation, should it occur. 

Using AppleScript’s Text Item Delimiters 

Another way of breaking text apart is l>y making use of 
AppleScripfs text item delimiters property, which is actually a 
property of AppleScript itself, and can l>e retrieved or clianged 
at any time. AppleScript’s text item delimiters property contains the 
delimiter that is used to separate chunLs of text within a string. 


By default, AppleScript’s text item delimiters property is set to a 
value of essentially an empty string. 


'rhough AppleScripts text item delimiters may lie set to 
a list containing multiple values, AppleScript will only 
utilize the first value in the list. For this reason, when 
setting AppleScript’s text item delimiters, it is not 
necessary to specify a list. Rather, a string may l>e used, 
as you will see in the next ctxle example. 


AppleScript‘s text item delinlterg 

-> r^} 

A charaaer is die smallest element within a suing. Since 
AppleScript’s text item delimiiers are sci to an empty string by 
default, retrieving the text elements from a string will return die 
characters from within that suing in lust format. 

The following example code will demonstrate how 
AppleScript’s text item delimiters may lie changed in order la 
break apart a string. Plc'iise note that mexfifying diis i)ro|>erty of 
AppleScript may affect other CfKie in your script. ’ITierefore, 
you .sliould always lie sure to set the value of the properly back 
to its default value when you are done manipulating y(>ur string. 

flfit theT&xt to ■'01.01*2005" 
set AppleScript's text item delimiters to "*" 
set thcTextlteras to text items of thcText 
set AppleScript' 13 text item delimiters to I "“I 
thflXextlteia^J 

(“or* -or. “ 2005 "} 

As you can see, the example code above can be used to 
convert a string lo a list, using a specified dclimiien So, using 
ihis metiKxl, you could easily write code that would convert a 
lab delimited string into a li.st of fields* 

Tile AppleScript’s text item delimiters propc-rty may also be 
used tt) coerce a list of value.s I Kick lo a string, llie following 
example code will take the list outj)m by the previous example, 
and change il l>ack lu a string, using a different delimiter. 

set theTextliems to l*"0r* **01"* *'2005'"] 

set AppleScript's text item delimiters to * * 

set theText to theTextItems as string 

set AppleScript's text item delimiters to I"**] 

theText 

-> “01-01*2005" 

Now that we have explored ways u> convert a string lo a 
list and back, we can take things a step further, ’fhe folJt>wing 
example code will |XTform a find anti replace within a string. 

eat tbelext to "01 01 2005” 

set AppleScript's text Item delimiters to 

set theTextIterns to text items of theText 

set AppleScript's text item delimiters to “2" 

set theText to theTextItems as string 

set AppleScript's text item delimiters to i**"J 

theText 

-> '-01/01/2005“ 

in ihc example code above, every instance of the 
cliaracter is replaced with the **/” character. 
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fn ill I cif the extimples alx)ve, we were working with a 
single character as our delimiter. If desired, you may set 
AppleScript's text item delimiters to a longer string containmg 
multiple characters, such as a word or a paragraph. 

Reading and Writing Text 

Now iliat we have explored several ways to break apart 
and manipulate text, let's discuss ways to work widi files 
through reading and writing. 

Reading from a File 

Reading from a file is done using a command found in the 
File Read/Write suite of the Standard AddiUom scripting 
addition, To read from a file, use the read command. 

set theFile to choose file with {prompt “Select a text filer* 
read thaFile 

'the example code alx)ve will prompt you to select a text 
file. Next, it will read the file and return die entire (x^ntents of 
the file as a siring. 

When reading from a file, you may oprionally choose to use 
tlic open for access command, also found in the File 
Read/Wrile suite, to open a file, prior to reading from it. By 
u,sing this comtnand to open a file prior to reading from it, the 
file will remain opened in memory until the script closes the file, 
using the close access command, I‘or example: 


ffet theFile to choose file with prompt "Select a text filej” 
set theFileReference to open for access theFile 
set theFileContents to read theFileHeference 
close theFlleRefc rente 

As you can see from the example code alx>vc, the open 
for access command returns u reference to the opened file. 
That reference c'an then l>e used to refer to the opened file, 
usmg the read and close access commands. It is important to 
always use the close access command when you are done 
working with a file. Otherwise, the file will remain opened, 
and may not Ijc opened for access again until it is closet! 
This can potentially produce error messages in subsequeni 
runs of the script. 

When reading from a file, the read command offers some 
optional parameters. For Ix^st results with these parameters, you 
should use the open for access and close access commands, 
along witli tlie read command. The from and to parameters will 
allow you to read a small ponion of the file's contents. For 
example, the following example code will read a file up until 
die 10th character: 

set theFile to £.‘hoo!ie file with prompt “Select a text file:" 
set theFileRefereoce to open for access theFile 
set theFileCoiitents to read theFileReferencc to 10 
close access theFileReference 

The following example code will read a file between two 
specified characters, in this case, the text Ix^tween character 10 
and character 20: 
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set theFila to chogse file with prompt "Select a text file;** 
set theFileReference to open for access theFile 
set theFlleContents to read theFileReference from 10 to 20 
close aecesst theFileReference 

The until parameter will allow you to read a file until a 
specific character is detected. For example, the code lielow will 
read a file until a return character is delected, 

set theFile to choose file with prompt "Select a text file:" 
set theFileReference lo open for access theFile 
set theFileCoDtents to read theFileReference until return 
close access theFileReferenee 


spedfyan^ the number of the character at which the script 
should l>egin writing. 

Tile foOowing example code wiU append a specified siring 
to the end of a file: 

set theText lo text returned of (dleplay dialog "Please enter 
some text:^ default answer *"') 

set theFilePath to tpath to desktop as string) "test,txt" 
as string 

set theFileReference to open for access theFilePath with 
write permission 

write theText to theFileReference starting at eof 
close access theFileReference 


The using delimiter and using delimiters parameters will allow 
you to read a file using one or more specified delimiters. Tlie 
result will btf a list of strings, broken apart by tlie sf>ecified 
delimitcKs). Tills may be useful when reading a tab-delimited 
file directly, as it would dWtm you to break apart the file as it is 
read by tlie sc'ri|iL Ftjr example: 

set theFile to choose file with prompt Select a text rile:" 
set theFileReierence lo open for aceeBS theFile 
set theFileContents to read theFileReference using delimiler 
tab 

close access theFileReference 

Some of opUonal parameters shown alxive pos^sess 
additional hinciionahlics that were not covered in this article. In 
addition, the read command also includes some other optional 
parameters, w^hich may be useful in other situations. I 
encounige you to spend some additional time becoming familiar 
with all of die optional parameters of the read commaiid. 

Writing to a File 

To write data to a file, you use the write coinmand, also 
found in the file Read/Write suite. When using the write 
command, it is always necessary to use the open for access 
command prior to writing to the file. You cannot write to a file 
unless it has lK*en ofiened first. In addition, when o[Kming a file 
for writing, you must also specify the with write permission 
optional parameter for llie open for access command. 
Otherwi.se, the file will be opened, but you will not l>c able to 
write to it. 

The following example code will prompt the user to enter 
some text, and then write that text to a file on the desktop. 

set theText to text returned of (display dialog "Plea.^je 
enter some text:" default ansver 

set theFilePath to (path to desktop as String) & "tesittxt" 
as string 

set theFileReference to open for access theFilePath with 
write penulssiotJ 

write iheText to theFileReference 
close access theFileReference 

Like the read command, tfio write command also has 
some optional parameiers, including the starting at parameter. 
'ITiis panimeicr will allow you to specify at W'hat point in die 
file to begin writing. By default, the write command will start 
writing at the l>eginning of a file. To start writing at the end 
of a file, you may use die term eof, for end of file. You may 
also specify a numeric value for the starting at parameter, 


Oj^tionally, you may warn to use the sot eof command, also 
found in the Hie Reud/Wrile suite, in order to c'hange die 
loaitlon of the end of tlie file. For example, the following code 
will set the end of die file to 0, wiping all existing content, prior 
to writing the new text. 

Bet theText to text returned of (display dialog "Please enter 
BOfte text:" default answer "*) 

set theFilePath to (path to desktop as string) k "test.txt" 
as string 

set theFileReference to open for access theFilePath with 
write permission 

set eof of theFileReference to 0 

write theXext to theFileReference starting at eof 

close access theFileReference 

In Closing 

Now that we have explored sunie of die ways that you can 
uiLUiipulate text content, you can begin to experiment widi these 
meihoiis, and combine diem together in order to iKTfDrm more 
rol>u*st tyjxts of processing. For example, try ea^ating a handler 
that will write specified content lo a text file. Hien, call dial 
handler ihrougltoul a script to maintain a ninning activity log. 
You may find such a log to be asefut in monitoring the script's 
activity, as well as for trouble-shooting purposes. 

For continued learning alxiul working with text, l>e sure to 
review the AppleScript Language (iuUle, meniioncd earlier. You 
will also find detailed documemalion and additioail examples 
in most AppieStTipl Ixioks, such as Danny Goodman's 
AppieScript Handbook, available from SpUkrWorks, LLC at 
hltp://vvww,sp(derwork5.com. 

LIntii next lime, keep scripting! 

'i’ilj 
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MAC IN THE SHELL • by Edward Marczak 


□ 


DNS And E-mail 


Did You Know They’re Reuted? 

1 

e 

t) 

tl 

1 

1 t Ls ray charge to bring you all things Unix. To help you 

1 understand what’s going on beneath the GUI. Sometimes, this 
* involves troubleshooting. While DNS and e-mail no longer play 
exclusively in the Unix realm, they certainly spent their childhood 
here and have some Unixy-like scars to show for it. Not only did 
hey grow up in the same era, they just happen to be first cousins. 

’his particular column aims to be a tiny troubleshooting guide. 



Family Tree 

‘'DNS and 1 hear you 

‘‘Tl^ey are such different systems, and do 
completely different things!” Alt! It's the 
differences allow them to complement eat:h 
other, which is why they are such perfect 
mates. E-mail relies on DNS. In fact, most 
systems nowadays have some reliance on 
DNS. E-mail just won't get delivered without 
DNS. Kerberos ntjt fiincLioning? Check your 
DNS. Most other systems would just be 
cuml^ersome, as you'd have to specify other 
systems, not as a name, but as an IP address. 

E-mail servers rely on DNS in several 
ways. Your outbound e-mail .server must 
have access to DNS to kxikup mail routing 
information* To receive e-mail, your 
Internet facing DNS servers must be set up 
correctly to let others know how to reach 
you* DNS mis-configuralion is commonly a 
source of e-mail trouble. 

DNS 

Life without DNS cumbersome? Well, 
yeah - this is why DNS exists. Computers 


like numbers, people like names* The Domain Name System 
exists priinarily to convert names, like www.apple*com, into 
an IP address {numl->er), such as 17.112.152*32* It also helps us 
convert from number back to name. DNS has l>een pushed to 
do even more tlian tiiese simple translations* 

Bottom’s Up! 

Pm going to introduce these .systems youngest first. Before 
DNS existed, the name to address translation took place by 
looking up entries in a flat-file called ‘hosts’. This file still exists, 
and can still lx* used. There was a time when OS X ignored the 
hosts file, but it is now recognized Iry default. You can find it 
in /etc, where ail gtxxl Unix fxjxes store the host file. When the 
Internet was small enough, current host files were copied 
between machines - actually, one master machine, via ftp* 

Naturally, as the number of macMnes on the Internet grew, this 
system just didn’t .scale. In 1984, Paul Mockapetris relea*sed RFC 882 
and 883 - Domain Name System. Naturally, tliese EFCs were 
supplanted and augmented, but those two were the birdi of DNS. 

DNS provides a hiemrdiical, distributed database* Name 
servers are the programs responsible for transferring the database to 
clienis (as appropriate) and to other servers. OS X ships with BIND 
(Berkeley Internet Name Daemon) as its name server. There are 
other servers, such as DJB DNS, MataDNS, and even stand-alone 
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DNS hardwiin- mch a.s Blueau DNS. Tigt^r server, S|XH-ifiaiHy* ntns 
version 922 of BIND. While there are pros und «)ns to BIND, it 
is certainly tlie most po[)ular name server on tlic InLemel. 

history, on to tlie dcUiils! Please note that it Is 
outside the scope of this article to dig into every facet of DNS, and 
ril jusi be hitting on the Irctsic^s tretneinlier, wc ^stil! have to get to 
e-mail!). If you administer a name server^ need to know more 
about BIND CJr even walk by a iiiathine running a name server, 
you owe it to younx^lf to pick up 'DNS and BIND" by Albitz and 
Liu, publishetl by O'Reilly. Itet. DNS, Book. Ever. 1 still have 
my worn 2}^^^ edition. 'Ihe only ieaHt>n 1 haven't pickeci it up in 
a hit is Ixcause 1 commiUt?d it to memory long ago. 

The Details, Please! 

Most techies (that’s us) understand DNS staitaure. Generic 
top-level domains, stich as 'coni’, *mir, 'info' and *org’ hang just 
off of the rcx>t Delegated /ones live Ixneath die gTLDs, 

and sulxlomains and hosts follow. When queried about a zone 
that it openites (or, is auibomtive for), die tuuue server will 
consult its clatairase. BIND uses a simple flat-file scheme ft>r a 
daialiase, that is read at name-sender start up. Eat'h entry in the 
dataliase is rc^fened to as a n^cord. 'I'here arc many different 
kinds of records, and 1 w'on't lx covering them all, just the ones 
germane to this discussion. 

The main record to understand immediately is the A, or 
’’^address"' record. Ihis provides the core limctionalily: it maps 
a name to an address. An excerpt from Apple's DN5 may IcKik 
something like this (the ‘“IN"' stands for “'INternet class"’ - 
somewhat of a relic, hut still a reciuirenient): 

www.apple.com, IN A 17.m,152.32 

mail-in3.apple.com. IN A 17.254.13.8 

nservex.apple.cora, TN A 17.254.0.50 

So, when you ret|uest www.apple.com in your browser, 
yoLir system asks DNS to mwkfe the name, and in turn ts told 
'17.112.152.32^ (For those of you who know this cold, ye.s, this 
IS a smiplified version of how^ this all works). You can use DNS 
U) help rransition to a new server by clianging ihe A recoixl. 
Let's say you run web services at www.examplexom. The A 
record for www p<.>ints to 10.0.0.10. One day, you liuy the 
biggest, shiniest new' server. You could set it up as 10.0.0.11, 
configure it, and once ready, alter DNS to map 
www.examplexom to 10.0.0.1 L People don't have to Ic^arn a 
new name, bull they w ill get routed to the new server. 

Didn’t You Say Something 
About Mail? 

Move all of that DNS information over in your brain for a 
moment; I'll tell you w^hen to slide ii Ixick into the center again. 


E-rmil has long been one of my favorite systems. Em ntH 
sure why. It abstilutely disturbs my inner core when an 
e-mail system is not working. I started off with sendmail 
(lieforc the m4 macrcts were' the way to w'rite your c'f 
files), and shifted to Po.stfix when it was still Secure 
Mailer. What is seemingly a very^ simple thing - moving 
a lexl file from point A to point B - actually lias a fail- 
amount of complexity. 

If youVe only ever configured the mail system via the 
GUI, or come from an Exchange, Kerio or Communigate 
background, there's a simple issue that you may not know 
about. 1’iie sul>sysiem that is respOEisible for sending and 
receiving mail is completely separate from the suixs-ystetn 
that allows you access to yonr mail sptxji. When 
someone frotn ihe outside sends mail that is clescined for 
your mail .server, Postfix is responsible for receiving that 
mail via the SMTP protocol, figuring out what lo do with 
it, and either delivering it personally, or handing it off to 
an intermediajy. When you set up a mail client {or 
’’MUA" — Mmail Uuser Aagent) to retrieve mail via the 
POP protocol (“boooooo!”) or the IMAP protocol 
(^'Yeali!"), Cyrus is handling those rcxiuesis. When you 
.send an e-mail via your MUA, lx it Untourage, Mail.app, 
Eudimt, whatever - once again. Postfix is responsible for 
talking to your mail client, queuing and sending the mail 
to the remote .system. So how does tliis aU lie together? 

Once again, imagine you run all services for 
ex;tmple.com. When mail destined for nuiil.example.com 
is presented to your OS X Servxr, Postfix, listening on port 
25 for activity, springs into action. Postfix itself has 
several suli.sy.stems that deal with various stages of 
accepting, queuing and delivery. IlowevLT, one of the 
first tilings PMfix must do. Is decide whether or not this 
piece of mail belongs on this server or not! Is it really ftjr 
'exiimple.com? tf .so, is there a user by the name 
rc(jue.ste<.l? Important tjuesiions, right? If the mail truly 
Ixlongs here, it has to get added to the correct user's mail 
spook In OS X's ca.se. Postfix hands the mail off to Cyrus 
via mrw 

Most iieople have heard of SM'l?, the simple mail 
transfer prottxrol. Tliis protocol is it.'sponsible for delivering 
mail lietween two systems ovei- a network - typiailly over 
a WAN or the Intemcl. S(>niewhat lesser known i.s LMTP, 
the local tnatl transfer protocol. OS X uses LM'l'P exaGly as 
designed: to allow two mail systems rt'siding on the same 
macliine to exchange mail (actunliy, these two can also be 
iwtj separate machines on the same network). LMD^ iLses 
the Siime semantic's as SMTP, but avoids queuing. LMTP 
mmt piXKess each message as it isUiey are received. It is 
also .stipulated that LMTP must not nm on port 25. In our 
case, LMTF* exists as a .s<x:kel in /var/imap/socket. 
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Once die message is handed off via LM'I V, Cynis Is responsible 
for dropping the message in the proper user's jnaii store 
(specitic'allyj Ccyrus' ^deliver agent diLs, altlioiigh nowadays, 
‘deliver' is deprecxited, and Ls just a \vrap|>er for LMTP delivery). 
Wlien a person commands dieir e-niail program to “‘Get New Mair’ 
Cryrus Ls respoasifjie for answering die request by accessing tlie 
mail store, and answering via the POP or IMAP proToc:ois. 

Uh-oh 

You’re a freelancer or in house IT person that’s resiionsible 
for a mail system, and you gel tlie call: “I'm not receiving any 
mail!" What (o do? First, find out of it's just the perM)n who 
called, or if the problem affects everyone- If you have an 
account on the system in tjuestion, send yourself a test message 
from your GMail account (unless, of course, someone from 
Google is reading this and you're Irying to troubleshoot GMail, 
In that case, use Hotmail), If you receive it, great It's likely 
limited to that one person dial called, 

If you didn't receive it, time to sLarl looking ai ihe logs, 
Let's stop riglit here for a second whiJe I admit something, I love 
logs. I'm a bit obsessed with them. A fumre column will touch 
a bit more on logs, fiut let's just remind ourselves iiow ImponanL 
they are. Logs are the heart of yt>ur system. I typically keep one 
madtine nearby that dtx^s ntJthing but watch logs fur me. It's 
gtxxJ to glance ai so you gel used to the rliythm. 'Ibat way, 
when that rhythm gets broken, yf>u can recognize it in,standy. 
That .said, you want to follow /var/log/mail.log riglit now. I 
recommend using 1ail -f in terminal for this. Send that test 
message again. Ls diere an entry in the log for this? 

OK, now's tlie time to du.st off that HNS information. If 
there’s no entry in tlie mail log, it's likely that the mail server is 
just fine, rather, it's DNS that is having an is,sue. As mentioned, 
there are several kinds of DNS records, the A record just being 
one. Tlic MX recoi'd defines a 'mail exchanger' for the domain 
or sulxlomain. If that's not configured properly, mail isn't going 
to get delivered. 

When I type Lip and send an e-mail, my MU A hands off die 
message to my e-mail ser\^er (or, Mail Delivery Transfer Agent - 
MTIM), The mail server then queues the message and figures 
out ht)w to deliver said messiige. If my message Ls destined for 
stev 0 n@radiotope.com, the server must flrsi find out where it 
is to send this mail DNS has ihe answer. This is a three-part 
conversation dial would go something like this: 

example server: "Excuse me, DNS for radioio[)e,com, can 
you please give me your mail exchanger?" 

radiotope DNS: “Sure, it's www.radiotopexonn." 
example server: "Oh. Fve never dealt wiili diat server 
[x.‘fure, what’s its IP address?" 

radiotope DNS: “No problem, that's 69.53.224. lO'i" 
example: Thanks?" 

example: "Pardon me, vwvw,radtOtOpexom, I've got some 
mail for you!" 

radioiofx: imtil server: ‘Til lake that, thanJe you!" 

Notice liow much of that conversation happens with die DNS 


server Fortunately, iJie mail server will caebt' die results for 
radiotopexom, and won't have to ask until the cache TTL (tiirie 
to live nms out). 

So, if DNS isn't correct, die mail will never hit the proper 
mail server, and you'll never see it in the lug file, 

Fve had an incredible increase in the amount of mail server 
troubleshooting that I'm dtiing for people. Apple certainly 
hasn't had a perfect record here. Up until 10.3.4 in the Panther 
series, people were bitten with die ‘log rolling bug’. That did 
get fixed. However, weVe all still living with the ‘reconstruct 
bugl When yon c:heck die maillog file, you may see entries 
like this: 

Jul 5 10:33:38 nailserver deliver(379]: 

connect(/var/imap/socket/Itttp) failed; Connection refused 


Or, this: 

Jul 3 04:49:27 mail iM>stflx/pipe[8805]: 6E8AF9A9F2: 
to“<jiinbob^>oxatuple,com), relay=cyrus. delay^l35898. 
fitatU 3 “d«fetxed (temporary failure. Cotntnand output: couldn't 
connect to iuitpil: Connection refused,, 421 4.3,0 deliver: 
couldn’t connect to lrotpd_ ) 

On a busy rtiaii server, youll .see a lot of these. They're 
both txjmmonly associates! wirli a corrupt Cyrus database. Time 
to stop mail, anti for a little explanation. Stop the mail services: 

serveradmin stop mail 

Although die issue here Ls with Cyrus, this command will slop 
both Postfix and CynLs. You don't want things trying to deliver 
to a corrupt mail store. As mentioned earlier, Postfix hands die 
message to Cya*s via LM'H* via a socket file. It was also 
mentioned that LMTP doe.sn’l [lerform queuing - it is required 
to prcxress each mesvsage as it’s received. In diis case, it can't. 
Either Cyni.s isn't mnning at all, or it has corruption in its 
database. To see if Cyrus is running, look for die evidence of 
'master' in your process list: 


1 pB ax 1 

grep 

[m]a^ter 


206 

?? 

Ss 

0:00.01 

nffid -master 

227 

11 

Ss 

0:57.2/ 

lUfifiter 

29133 

71 

Ss 

0:00.05 

inaster 


Whaaaa? Hiere's two! For better or worse, Ixiili Cyrus and 
Po-sifix liave their master prtx:esses named “master"- You can 
.see which is which with Isof: 

Isof I grep BUIS ter 

You should see a group of master processes owned by 
root, followed by a group owned f>y cynis (cynisdinap on 
Tiger), If Cyrus is genuinely not rumijiig, watch your system log 
(/var/Iog/system.log) and hand crank it: 
"/usr/bin/cyrusA>in/master Naturally, you can als() stop and 
start all mail services while watching the log, 

Cyrus 

Unlike many other IMAP and POP servers, Cyrus takes a 
different approach to handling mail. Traditional IMAP 
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servers, such as UW-IMAP, really don'i get involved in the 
delivery process at alL You tell them where the mail spool is, 
and they relay that to die user. In some cases, die IMAP 
server will he responsible for taking mail out of the system 
spool and moving it ro a spool in the user's home. Not so 
widi Cyrus. Once Postfix hands off the message to Cyrus, the 
'deliver' agent is responsibie for getting the mail into the 
correct mail queue. 

Here's where Cyrus is completely different. Deliver will 
drop the me.s.sage into the correct user's mail store, sitting at 
/var/spool/imap/u.ser/( username) ^ this is the default ItKation 
for OS X, and you can move it to another partition, so be aware 
if you have done so. “deliver" is Cyrus' Mail Delivery Agent 
(MDA). That’s all standard, but Gyrus goes above and iK'yond 
this, keeping a daLilmse of mailboxes, ACl*s (not the Apple 
filesystem ACLs: - Cyrus sports its own ACL list that can let 
others have at'cess to your maillxjxes* As far as I know, there 
is no Ap[)le-offictal way to change the Cynts ACLs), seen 
mes.sages, quotas, etc. The databases diat keep track of this are 
in BDB format, and live in /var/imap. 

Like any database, there's always a chance that it will gel 
corrupted or somehow (jut-of-sync. Sometimes, I've seen this 
liappen with a system crasli. OK, that makes sense. The disks 
went down dirfy, ami files didn't get cltxsed. Oddly, IVe also 
seen Cyrus go batty with no great explanation (however, I do 
.sometimes show up on die scene to clean up, and let's face it, 
[>eople aren't alw^ays 1(X)% accurate about the events dial lead 
up to the wliole mail system going down). But if you're seeing 
errors in the logs like the two above, there's a gcxxl chance you 
have stime Cyrus database prtihlems. 

Cyrus database problems can come in several flavors, so 
let's hit the liigldigliLs: 

Permissions errors 

Our good old frienti ‘permissions' is back! /var/imap 
sliould be owned by cynisanail, with perms of 755, all the ways 
down. Same goes for /var/spot>(/imap, with one exception: 
/var/spool/iimp/tiser shcKiId be a linle more resrriaive: 700 for 
it and its contents. 

If Cyrus can't read and write into those folders, it's going to 
have problems delivering and retrieving mail. So double-check 
those Iblders! 

Damaged Socket File 

You should really never see this condition. However, this 
is a variation on the first condition: the socket could have the 
wrong iKTmissions assigned (although, that should never 
change unless you touch them!). Bonus: they auto create on 
Cyrus ,stamip. Just nuke 'em from /var/imap/socket with mail 
services stopped. 'Ihey'll get created properly when services are 
restarted. For tlie record, a 'liger server at minimum will look 
like this: 

§ Ib 1 /var/imap/sDfiket 

tv - - 1 cyrustma mail D Jui 2 00:12 Jmap l.iuck 

BrwxniQtrwx 1 tool nail 0 Jul 2 22:50 Imtp 



Website Not Found By Clients 
HTTP 404 - Website not found 


The website you are looking for can't be found 
by your clients. It may have been improperly 
marketed, had poor design, or didn't work. 
Regardless, it's not helping your business! 


Your Options: 

• Rent a chicken suit and stand on the 
corner handing out flyers 

• Paint the company URL on your chest and 
face during a major sporting event 

• Contact SharpNET Solutions internet 
marketing and web design specialists, 
watch your traffic and rankings increase, 
get great feedback from all your 

new customers. 

HTTP 404 - Website needs SharpNET 



Not Marketing Your Site? 

If you are not marketing your 
website online, you may as well 
have a 404 error for a website. 

Web Design 
Internet Marketing 
Consulting 
Lead Generation 
Multi-Media 


1 - 877 - 583-8396 

www.sharpnetsolutions.com 













Database corruption 

TliLs seems to l:>e the l)ig one. There are several things 
tliat am go a hit bally here. 1 can't stress the impoitance 
of backups ent3ugh, The crummy tiling is that to back up 
Cynis properly, you need to shut down mail, and there's 
no great alternative on OS X. Hot backups here can lead 
to inconsistent stales. Backup, backup, l^ackup, and test, 
test, test! I mention this simply because restoring llie 
database from the mail s|kx>I is really imperfecl. Tliere are 
certain things tliai can not lie inferred IVom the mail store, 
so those things get set back to a default state. 

Here's how this works: as Cyrus drops mail into the 
mail sjiool (/var/sfx>ol/imap) appropriately, it ujxlates its 
databases (/var/iniap). 'Ihey're relatively independent - 
the mail spool can live wiiliout the database, liowever, 
that's where Gyms stores all of the metadata (remember 
tliat stuff?), so it neecLs to lie protected. Cyrus keeps watch 
over this by check-potniing tlie database at regular 
intervals. The tcK>I that rebuilds the datalxise is called 
Reconstruct'. I’ll spare you the long story and cut right to 
the c hase: Aj^ple's latest version of reconstnicl is a bit 
FUBARed. The bad version snuck in under a ‘security 
update'. 'Iliere's an open source repkicemcnt that corrects 
the mistake that Apple's version makes. C}et it here: 
http://www.sussex.ac.uk/Users/jamesg/reconstruct.zip. 
Tlie (long) explanation for this takes place in this thread 
on Apple's support lioards: 

http://discussions.info.apple.conrVwebx?7®1022.JKM0abd8V 

6f.2@.68aec789/9 

Is ihere any hann in running Ai>ple's version? Well, yes, 
Apple's version will reset the internal time-stamp t>f 
messages to t)’ (zero). Tills won’t alTeci every mail client, 
but gue.ss which two it will? Apple’s Mailapp and Entourage 
— tlie two mos\ popular mail client on OS X. tlow' do you 
know if yoiiVe Ik-'cti hit wiih this? If, after a leconstnict, 
your mail clients are choking while trying to clieclc for new 
mail, but webmail (using the built-in scjuirrelnuuD Is fine, 
sounds like this is the issue. Get the replacement from the 
URk alx)ve, cluxise the version appropriate for your 
platform (ye.s, this currently stiil exists in 10,4/1), Backup 
you r origina I (m v /usr/liin/cy nis/l >in/reconstRJCt 
/usr/hinAyrus/bin/reconstmct.apple) and drop tlie 
replacement into the same directory 
(/usr/biii/cyius/bin/recoiistnict). Set the wheels in motion 
like this: 

L Start a pot of water I Killing. Now is no time to panic, 
and tea will do you some good, Freferably some green 
or camomile. 

2. Slop all mail services. If you didn't do so above, do 
,so now: servenicimin stop mail 

3. backup /var/spool/imap and /var/imap...just in case 

4. Hun reconstruct. You must do this as cyms: 


sudo -u cyrus /usr/bin/cyrus/biD/reconstryct -1 

'Ihe 'h' flag here w'ill tebuild sub folders for each 
nser as well. You should see messages .scrolling 
by as recoastmn works its way through each 
user Depending on the size of the mitil store, lilts 
could Lake some time. Now's the time to pour 
tliat cup of tea. 

Once that is complete, try firing up ihc mail .system again: 
server admin start mail. On rare otx'^isions, this 
won't start Postfix. Sip I hat tea, and simply lyjx": postfix 
start. No problem. At tliis point, mail should i>e flowing 
again. Queucil niiiil, and new^ mail coming in should lx: 
getting delivered, and people should lie able to access tlieir 
mail. Tills alone will make them happy enough to ignore 
this issue: ALL of tlieir mail will now lx? [ixirked unread. 
Flags will lx: kist. Butl “Ilieir mail will lie back! Make the 
rounds, then finish off tlial lea. Maylx^ even get a cookie. 
What the heck. 

Redundant Redundancy 

A brillianl concept with DNS and mail is that you can 
sptxify nmilipie MX recrords. You can (and .should) 
assign them a priority. “0" is the litghesl priority, with 
everything else being lower. So, when DNS specitle.s: 

example.com, IN MX iO ren.example.Com. 
example . com. JN MX 20 stinipy.examplG.com. 

"10” is the Mgber jiriority server Tiiat's where uiLiil 
sfmtiki go. I lowever, if ren.exam[)le.com is down, die mail 
will get delivered to stimpy.example.ctim. Ftir !x:st effect, 
R^n and .siimpy should on st^paraie netwtjrks. In ditTerent 
buikiings. In different .sta!e.s. if jxxssible. If you mn mail 
seivices in-liouse, see if your ISP will perform backup MX 
duties for you. Mosi will, like Iraeking up data nighily, 
having a backup mail sewer (or two.. .or three) is more dian 
w^orili it. Don't walk tliis iightrr>[X" wdth no net: hxive a 
Irackup mail .server widi properly configured MX recortLs. 

In the previous section, we had to take our mail 
seivices out of commi.sston w'liile we repaired the Cyrus 
tUualxises. if someone was Hying to send us mail at that 
moment - something that has a very high prohabilily - 
without a backup mail server, it's going to bounce back 
to tliem. We'll have dropf>ed off the face of die Internet! 
However, with the backup .server in place, the mad will 
get routed there, and lie tlelivered lu our main mat! server 
once it's back on-line. Brilliant, just brilliant! 

Other Troubleshooting 

Naturally, for a mail .server to receive mail, it must lx: 
accessible. 1 recommend that anyone who does network 
troubleshooting have an externally accessible machine - 


68 July • 2005 


WWW.MACTECH.COM 





prcjeral)ly Uirough ssh, although AliD and Timbuktu will 
let you gel a slietl also. This will be used for the purpose 
of getting an outside view of Llie network yotiVe currently 
w'orking on. 

To le,si SMTP, access your outside machine, get a 
sheik and type: 

telnet mail.example.com 2S 

Of course, you need lo subsiirute the Fully Qualified 
Domain Name (PQDN) of }K>ur mail server You should 
receive a reply like this: 

Trying 192.168,0.18... 

Connected to malX.exaiBple.com. 

Escape character is ' j ' . 

220 mail.example.com ESMTP Postfix 

Type ‘C[Uit' and press return to gel I rack to ytnir prompt. If 
you do not get tiiis greeting, eiilier Postfix Ls noi ninning, or 
somelliing is bkx:king access. If your external test maciiine 
is on a residential network, it's likely that port 25 is bloc'ked. 
Make sure you don’t let that tiirovv you off. You t:an have 
Prxsifix listen to bc.>th 25 and an alternate |X>it by adding this 
line into /etc/fx>stfix/master.(T 

8025 i net n n * sratpd 

Where 8025 is the new port that Po.stfix will listen to. 
Save the file, and type: 

postfix reload 

to restart Postfix and allow it lo incorporate this change. 

You can test IMAP in a similar way. Again, using 
telnet, connect to port 143: 

S relfiei mail.exampia .com 143 
Trying 192.168-0.18. . . 

Connected to mail.example,com. 

Hscap© charactar is '^1*. 

* OK mail.example.com C.yrua TMAP4 v2.2. 12-08 X 10.3 
server ready 

just like the SMTl^ test, if you do not see this 
greeting, either Cyais is not serving up IMAP for some 


reason, nr the port is being blocked from you. While T 
haven’t found an ISP that currently blacks IMAP, 
perhaps there is an errant firewall rule preventing 
access. When you’re done here, type ''01 logout” and 
press return. 

Serendipity 

Like tliLs column, e-mail and DNS are completely 
intertwined. Bodi have nuances and pitfalls that require 
a bit of knowledge. I’ve been helping people out more 
and more frec|uen!ly with mail Lssues. The sad news is 
that OS X’s built in mail system is just about there, but 
not quite, 'fhe problems lie more on the Cyrus side — 
specifically due to the way rheyTe implemented on OS 
X. You’ll find plenty of stable Cyrus servers running on 
other platforms. Postfix, Lliunkfully, is jast a rock. 
When troubleshooting mail, remember: mail is really a 
bag of tricks, and nol one single coherent system. There 
are, of course, other factors that wall impact mail 
delivery, such as network design, choice of mail host, 
con Lent filtering schemes, intermediary mail routers, 
firewall and/or NAT niles, and more. Many Facets of 
your seemingiy distinct pieces of network cc)uipment 
are inherently intertwined. 

This isn’t always the easiest of stuff. Questions? Peel 
free to send 'em my way at emarezak@maciech.com. 

_ 

About The Author 

Ed Uaraak, oms and operates Radiotape, 
a tedtaology coasuitiag tompaay that 
implements mail servers and mnii 
automation. When not typing hriously, he 
spends time with his wife and two 
daughters. Get your mail oa at 
http;//wwwjadiotape.com 
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Game Controllers 

Some Different Ways To Kill The Creatures 


The keyboard and mouse. Your basic gear 
for getting ilie l^ad guys, the Ix^sses, and 
oirttxm ihingies that burst into clouds of 
flowers and hearts tn their death throes. It 
works. Quire well, actually. But, every now and 
again, it's just not enough. Sometimes, you just 
want to feel like youVe eight, anti spending 
your allowance at the lc>t:al arcade, but do it on 
your 50” wide .screen Cinema Display, Or you'd 
like to mop up that level full of demons using 
your game console controller, if only you ct)u]d 
plug it in. Well, wisli nt> more. 


Arcade 

So, like I 
m e n I i o n e d 
above, every 
once in a 
while, 1 long 
for the simple 
tUiys of 

dropping 
tjualters into a 
really big 
boxes, and 
blasting long 
lines of 

pixilated 
aliens for 
about minutes before getting myself 

blasted three times in cjuick succes.sion. Okay, 
so maybe not all that often, but it does 
happen. I got one of those little gadgets for 
Christmas that plug.s into the TV, and it was 
great. Hut, ii didn’t control the way I 
remember. Well, take a look at this. (See 
Picture.) 

Pictured above is the X-Arcade dual 
control. There is also a single control version. 
Oh, my. It's like they went to the scrap heap, 
yanked the control boards off every old 


Asteroids machine they could find, polished 
them, and shipped them off to their 
customers. In actuality, that's nor far off. The 
X-Arcade folks have built what is, really, the 
console from any arcade video game you 
played as a kid. The joy stick's feel is 
genuine. The buttons are dead on. The box 
ts built oui of ihe same materials as the real 
thing. It's l>rjlliant. It Iwks and feels exactly 
like the real thing. 

It is designed to play the old arcade 
games. MacMAME is alt ready to play with it, 

which is 
(luilc nice. 
Load it up, 
get some 
ROM's, and 
you're in 
business, X- 
Arcade's web 
.site lias links 
to some legal 
ways to gel 
games lo play 
with it. 

However, the 
one thing that 
drove me 
nuts was that 
the buttons 
were all the same, I ended up taping lalx*ls 
next to the buUons in order to know what I 
was doing. Color coding them, or numbering 
or lettering them would have been a very 
nice idea. 

www.x-arcade.com/mac/ 

Nyko AirFlo EX 

“DadJ Come get this lx>ss for me! 1 
can't! Pleeeeeaaaaasssssseeee!?'' Yeah, 1 
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know^ you've heard it, too. You then tnidge up 
Lite stair, only to be handed this slimy, wcl thing 
with bits of who knows what snack dripping off 
it because your spawn is midway through a 
weekend long game finishing marailion. Ick 
doesn't quiie cover ii. Well, thank goodness for 
Nyko, hheyVe got oui what is essentially a 
standard PlayStation style controller, tJSB, that's 
got one thing most other controllers don't have. 
Air conditioning. Think on it. The AirFlo EX has 
a built in fan that runs air through ilie handles, 
and out the vented holes of the thing. 
Outstanding. Grip it for hours on end, and you 
won't have a bit of sweat on ilie coni roller. Die 
feel is very like that of a PlayStation controller, 
except for a few things. One, the grip is 
knobbed, making it hold better. Also, in order to 
fit the fan tn, and leave enough room to move air 
through it, it's rather bigger chat the standard 
sized controller. It actually a bit more comfortable 
for bigger hands, hui ^small kid's hands 
(referenced above) may find it a bit much over 
time. My only other gripe i.s the same one 1 had 
for the X-Arcade, The lack of labeling on the 
Imtions. 1 know they can't pul the proper PS2 
colors and shapes on the button (copyright and 
all that), but does make il a little more difficult. 

The drivers for it are rather nice. IPs clean, 
works as you'd expect, and runs under Tiger. 
'Nuff said. 

WWW. nyko.com 


By Michael R. Harvey 
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Final Cut Express HD 


I wa.s titling in tlie audience at Macworld when Sieve 
Jo[)s announced iMavieMD. Fve goila lell ya, at the time 
you could have heartl a pin drop, i turned to my buddy 
and wliispered, Iiion*t e^ven work with bi^b- 

def and Vm a pmfessk>na( video guy! my mom 

going to do with HD?!? ' It wa.s one o[ those moments 
when Apple had jumped so far ahead of us all that we 
couldnl make out the taillights any more. 

Since that day, HD has i>een picking up so much 
momentum that you t‘an'l pick up a newspaper or watch 
*IV without seeing something that's selling HD-ready 
features. Granted, the cameras are still a bit pricy, but the 
prices are coming down fast. For example^ Sony's 
offerings have gone from $20,000 to $3>50(> with their 
HDR-FXl, and as Fm writing this, they just announced the 
HDR-HCl, a $2,0(K) addition to their HandyCam lineup 
that makes things even more interesting. 

Now let's say liiat you drop the cash on one of iliosc 
canieras and LMovie isn't going to keep up witli your 
creative needs, but you're not really needing the full 
capabilities of Final Cut Pro 5, That's where Final Cut 
Express HD (FCE) fills the void. Final Ctti Express IID is 
version 3 of Apple's mid-ievei editing j>atkage. This $299 
software package will do about 80-90 *Fq of what people 
do witii Final Cut Pro for 1/3^^ of the cost. As for llie rest 
of tile FCP’s features, most users wcm'l really ever think 
to look for them unless theyVe moving into the 
p n) f ess i onal a re na, 

For staiters, don't let the HD freak you out. Personally, 
1 still rion’t own an HD camera of my own (although I 
have a couple I can l>orrc^w in a pinch) and odds are you 
dt)iVl eitiier Tliink of FCK's High Dehnition aiiilily like tliat 
optical jack on uxlay's stereos. If you use it, you get this 
incredible surround sound quality, but if you just use the 
same t)ld analog white and red (left/rtght) cables that 
you've used for decades, you stilt gel good si^und, just not 
"WOAH IVELLY" surround sound. FCE works just hne with 
the MiniDV footage we've all come to know' and love. 
When you find yourself with an HD t:amera, you'll get a 
much l:)erter picture ilian you’re used to, but you 11 import 
it, edit it, and display it pretty much the same way ytju 
have with standard definition televi.sion. ItH just take a 
little longer for some of the filters to render 


The typical FCE user will l)c buying the softw^are 
liecause iMovie leaves them unfulfilled. With that in mind, 
Apple's made it seamless to open up your iMovie projects 
in FCE, All you have to tk) is hit ?-0 lo open a project, 
then select your iMovie file. You 11 find youiself looking at 
all the work you've already done in iMovie, but now you 
t:an Lake it to the next level with FCE. Any video 
transitions you u.sed in iMovie will also show up in the 
limeline, but they will come in as .separate, rendered 
videt> dips instead of transitions. Many iMovie transitions 
don't have FCE counierpart.s, so if your artistic vision 
requires the use of disintegrate, you'll liave to work in 
both programs. 

Importing footage is a cakewalk, as long as you're not 
mixing formats. If your project is an HDV format project, 
FCE will ignore your NTSC-DV format deck or camera, 
and lell you that it can't find the HDV deck, which can l>e 
a l>it confusing. Essentially, FCE is f)uilt to work with one 
format and then stick to it. You can mix HD and SD 
footage in the same [project, but you1l have to import the 
J'cK)iage u.sing 2 different projec ts first, one for SD and one 
for HD. 

Mcxsi of the ediuniul features are virtually identical 
to FCP, so if youTe familiar with the Pro version, you'll 
take to Express like a duck to water. The iMovie to FCE 
converts will be gaining an incredible amount of 
ccjiitroi over their video fre^m whai they're used to. 
TheyII also be getting an et|uaily incredible number of 
new buttons and inenu.s and tabs. Lie prepared for a 
learning curve, but trust me, once you learn how to use 
all the features of FCE, you/ll be armed with abilities we 
only dreamed of back in the old edit bays of the 20^^^ 
century, well, j>nur to 1990 c^r so at any rate. Not only 
that, but if you master FCE, then you'll have the 
technical skills to be a profossional video editor. Fm not 
saying you'll be any good, but you'll techniL-ally know 
how to do the work. (I know how to wwk a 
paintbrush, but I ain't no VanGough.) 

1'he key feature (pun intended) that's mis.sing from 
FCE is key Iraiiies. When you see a logo drifting across the 
background, that's using key frames. You set a start 
location key frame and an end location key frame, and 
FCP will move the item from A to B. You can't do that 
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with FCE. It’s more than a little disconceiting for us TCP 
users at firsr l>ecatise wtrVe so tisecl to seeing the key 
frame areas in many of the tabs. With FCP, you apply a 
selling, anti live with it for tlie whole dip. Of course, you 
can overcome this somewhat hy using dissolves between 
2 versions of the same clif); for instance, dissolving from 
a desai lira ted clip to a normal dip will lei you go from 
black and wliiie lo c t)lor over time, bur you can’t driJt 
objects, or create a dnimaiit' nick fcK’us, or do the 
thousands of other obscure special effecis tliai key frame 
tinkering can prf>duce. If you Ye getting that fancy, pony 
up for TCP. 

Probably tlie 
single biggest 
ability you get 
with FCH tlmt you 
cani do with 
iMovie is the 
ability to work in 
layers. FCF will let 
you sVAck sevenil 
layers of video on 

of each odier 
lo make a 
complex video 
image. Have a 
look ai the 
graphic in the SD 
vs. HL> sidebar, 
and you 11 see 

something 1 ^ 

. 1 . 1 . Figure 1: The 

completely “ 

created in FCE. llie pictures, the text, tlie red lK)rder, and 
the drop shadows are all from FCE. It makes a nice still, but 
it’s mt>re impressive when the video is playing. 

FCH will let you work with pretty much anyihing that 
QuickTime can understand, so you can add TIFFs or JPGs 
to your iiKwie, or you can ii.se FCK to make a slide show 
movie* Unfortunately, you can’t do that Ken Burns Effect 
.stuff in FCF because of that pesky key frame thing. You 
catt im[>oii a Ken Burns Effect iMovie into I'CF, but the 
pictures wall come in as rendered video dips instead of 
stills ai that point, so you can’t change iheir drifting 
properties any more* 

Something that has FCE silling cm the fence is the use 
of lime code. 'Hme code is what video editors use to map 
out exactly what frames of video they want to use in a 
sequence. Each frame ol* video has its own number 


based on Hours:Minutes:Seconds:Frames* FCE is a 
simplified version of FCP, *so obviously it uses time code 
to keep track of everything, but it has noihing to do with 
the time code on your source tape* All DV camcorders 
record lime code on the tape so you can find iin exact 
frame of video by the numbers. FCE doesn't import that 
time code when it imports it’s video* It edits by timer 
values in.stead. Every dip starts at t>0:00‘00:(K) and counts 
up. It doesn’t mailer if it's the first dtp on the tape or the 
last dip on the tape* They all start at zero. Because of this 
you can't produce Edit Decision Lists. You also caiiY 

import your 
footage at low 
resolution and 
then batdi 
digitize it at high 
resolution later. 
If you Ye coming 
to i’CE from 
iMovie, you 
won’t really 
care. You can 
still get the (ob 
done just hy 
looking at the 
picture, and 
picking what 
frame yem want 
to start with just 
like you do in 
iMovie. if you Ye 
used to FCP, 
then you 11 have to retrain your brain to get away from 
the numbers. 

Tfiat last point bears repeating. Footage captured with 
FCH tjm no itme code (rack lU all Team from my mistake. 
You might tliink it would be fantastic to use the cheaper 
FCE for importing fcxitage while you keep working on the 
more expeiLSive FCP system, !>ut don't do it! If you ever 
have to go back to redigitize the footage later, you’ll 
realize tliai you can’t. Professional projects need to stick 
with Final Cut Pro. 

llowewr you can go the other way as far as I’ve l>een 
able to tell from my resting* FCE might leave you high and 
dry when it comes la importing ftx>cage, but it does a fine 
job of rendering timelines from FCP. Take this with a 
grain of salt, but it worked for me* If you iiave FCP and 
FCE both instill led on your system, and you open an FCP 
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project with FCE, you can lei FCE render die timeline in 
the background while you keep plodding away in FCP in 
the foreground on another project You1l need a fast 
computer, but for some of us, it’s worlli $299 to be able 
to render in the background so we can keep working. It 
even renders files dial can’t l:>e created with FCE liet'ause 
of key frames or whainor. lliaFs very cckiI. 

A few of the odier diings dial fall into the pro area 
which aren’t in FCE: Audio mixer, 3-way color corrector, 
video meters (waveform, vectorscope, etc.), Lime ctxle 
generator/reader, Media Manager. 

A few really cck> 1 diings that are in FCE thai 1 wasn’t 
expecting to see: 

Chroma Keyer ik Color Keyer - for kncxking out 
green screen backgrounds. 

Basic 30 - lets you position objects at any angle to the 
video plane, but without key framing, you can’t have an 
object rotate in space over time. 

Image Stabilizer * Lakes minor shaking out of fcxitage. 

(Tn fact, almost all of the filters and transitions found 
in FCF are in FCEJ 
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www.mactech.com 


Sidebar: 

SD & DV vs. HDTV & HDV 

The television formal weVe all been watching since 
Ricky loved Lucy is now lieing called StandanJ Definition 
{or SD or SDTV). It only got that name after High 
Deftnition (or HD or HDTV) video came along. ITie 
difference mostly boils down to resolution. Hf) has 6x the 
[liciure resolution of SD, which means it eats up a lot 
more hard drive space. DV ft>oiage (3.6 MB/s) is 
compressed a little to make it more manageable, HDV 
footage (15 MB/s) on the other hand i.s pretty lieavily 
compressed. Most of the time that compression will hold 
up pretty well, but if you find yourself at a New York 
fashion show with strobe lights popping all over the place 
atid you move the camera around, ynu1l be al>le to see 
the codec choke on all the changing pixels as it puts ugly 
little lx>xes all over sweet, lovely Din Kuik’s face for a 
frame or two, (Are you catching on that Vm not being 
liypoilietical alx)ur tJiis scenario?) The moral of the story 
is to keep HDV away from images that border on berserk 
and ii1l deliver damn fine pictures for the price. Tf you 
want perfect HD pictures, you’re moving into the $ 60 ,() 0 {} 
camera ballpark. I think it’s safe to say that most people 
will find a way to live with the limits of HDV, 



Figure 2: Widescreen (16:9) SD vs. HD image sixe difference 

By Sam Crutsinger 
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Old dog. New trick. 



Growing up in Hawaii. Ron Stanford ieamed 
to surf at an age when most kids are still 
mastering the tricycle. 

Making web sites came a bit later. 

Ron's love of surfing took him to Nicaragua, 
where he fell in love with the uncluttered 
beaches and the locals' unassuming 
approach to tourism. 

'I started NicaSurf.com in 1998, and the 
first year of producing it was sheer torture. 

I knew what I wanted the site to look like, 
but why was it so difficult to achieve?” 


As an award-winning creative 
director and filmmaker, Ron 
was used to the control and 
finesse of desktop publishing 
and nonlinear editing tools. So 
he expected a lot from his Web 
design software. 

‘In 1999, a friend showed me Freeway. 

And a light went on—this is how Web 
design was supposed to work! Freeway 
lets me put my ideas on the page, exactly 
how I want them to look—it’s total design 
freedom, no compromises. And I don't need 


to hire a big team just 
to get the job done.” 

'I was able to m^e a 
site with Freeway that 
expressed my love for 
surfing and Nicaragua. 
And now my client in 
San Juan del Sur has customers from all 
over the world," 

Don't just surf the Web. Download a free 30- 
day trial of Freeway Pro or Freeway Express 
today, and make your own waves! 




Freeway Frt) 
Web Site Dsign 
ami PubtisNIiiti 



WINNER 


Ptettwaif Express 
Editors 

Corisiitw Sonware 


1 #^ 


Vtecent Reyletffs: 
MecDcsign: 5 out Of 5 
MacFtifinat: 5 out of i 
MocOiroctoryr 4,5 out of 5 


(7) freeway 
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Vendetta Online 


Vendetta 
Online is the 
three 
dimensional, 
massively 
multiplayer 
online version 
of Escape 
Velocity. Really, 

It Is at least as 
niuch fun as 
any of the three 
EV games are, 
and it is 
absolutely 
beautiful to 
ltK)k at. Not 
only Uiat, it's a 
blast to play. 

When you first 
join the 

universe, you 
can nm through 
several training 
missions to get you up to sj^ecd, and prepared for 
operating there. You don't have to, though. You can jump 
right in, and figure it out as you go along. There's 
something to be said for going out with nothing, and killing 
things without having a clue as to why. h'iguring tiui 
dcx:king w'ith space stations was an adventure, Uk>, But, 
you'll get it figured out soon enough. 

And. figuring it out really isn't all that hard. The 
controls are set up along the same lines as oilier games of 
similar type. You're using the keylx>ard nK>stly, althougli 
you can use the mouse, or a joy stick. I found that going 
from the key]x)ard to the mouse was a bit more trouble 
ilian it was worth, except during coml)at. 

Ihe basic message to take away form this is that this 
game is all kinds if fun to play, incoiporatlng elements of 
first person shooter, space shoot-em-up, role playing, and 
stnttegy gaming into this online fun injuse. 

So, flow do you come by it? Well, start here: 
www.vendetta-oniinexom. From here, you can find out 


more aliout tJie 
game, as weO as 
the community. 
From liere, you 
can also 

download the 
game irself, 
which weighs in 
at around 112 
MB> You also 
have die option 
to buy a boxed 
copy, for 

around $10, and 
dial includes a 
few extras, like 
a poster of the 
universe, and a 
1> o o k 1 e t 
explaining the 
history. 

Well, then, 
w'hat about 
paying for 
playing? From the above mentioned we!) site, you can 
create an account, and get yourself a free trial of die 
game. Then, if it hooks you, which it just might, you're 
out $9*99 a month when you subscnbc on a month by 
month basis. Sign up for hunger terms, and the price 
drDp.s, dow'n to about $6.67 on a 24 month 
subscription. That is a great price, especially compared 
to other MMOKFCx. 

Keep one thing in mind when deciding if it's worth it. 
'Hie Vendetta universe is not static* The guys at Guild 
Softw'are are continuously working on the game, 
expanding the plat:e with more adventures to take on, 
and places lo visit. Thai strikes me as extra c<K)i 

Give it a go. You've got nothing to lose, and I liet 
you'll find it's great fun* And, if you're into them, this 
MMORPG is just about the best deal out there* It doesn't 
hurt that it's quite a good game, to boot. 

By Michael Ft. Harvey 
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iPod Voice Recorder, 


Works as a loud speaker! 

1 

Turn your iPod into a 
world-class voice 
recorder. 

1 

^ [1 
- » rtwi. ft 

' 

V 
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For Powerbook 
and iBook 
laptops * 




$3 999 


Cyclops 
256 M6 U58 
Flash Drive 

^999 




I USB Audio Interface 
‘ & Amplifier 




fiMic 

[$3499. 

USB Atidto Interface 



USB Multimedia 
Controller & Input | 
Device | 

* 36 ” 


w:mgm 


A must-have device for people 
who are serious about high 
quality audio. 


Connect 
i virtually 
any sound 
i device! 



TechTool Pro 4 . 0 "^ 

for Mac OS X 

1 'U 

The ultimate 

a^t:- 

emergency 

1 

software is now 

1 tttiyy. 

available for 


OSX! 


$89^9 


UNIX Utitities 

for Mac OS X 3.0 



Office Applications 

for Mac OS X 3.0 


^ 1 

i U 


Everything you 
need to turn 
your Mac 
into a UNIX 
Workstation. 



$3999 


Packed with 
office and 
productivity 
apps! 

$ 29 ” 


Bug reporting and organizingi 

* Includes 
free bug 
reporter 
with each 

application • 



release! 


$7999 
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Point-and-Click Astronomy With A Mac 

Use Starry Night, A Mac, And A Homemade 
Cable To See The Universe 


Suirry Night Pro is a fantastic piece of software for tiic 
asiif:>noniicaUy curious, as well as the advanced amateur. 
It seems capable of doing pmcticaliy anytliing, and the 
hinher you climb up die learning curve, the more really 
ccKil stuff it can do, llie scope (pun?) of this software is 
so enormous that writing a proper comprehensive review 
would be a daunting task, so instead, this article will 
concentrate on one of iitarry Night's functions tliat many 
observers can use and appreciate: Telescope control 

Equipment 

For a numi?er of years, telescope mantifat'iurcrs, such 
as Meade and Celestron, have sold telescopes with 
computers and drive motors that can l>e controlled from 
either a handheld unit included with the telescope, or via 
external computer. I'he included handheld units provide 
adequate control ability, including catalogs of thousands 
of stats, tlcep sky olijects, all eight other planets, and the 
mtK)n. Computer control, however, enables a user to view 
a map of the sky from a custom lcx.-atir>n, and poinl-and- 
click to select targets. Is M57, the Ring Nebula, on 
tonighds observing scliedtiie? Point, dick, and have a sip 
of coffee while your telescope slews to ilie proper 
location. Use the computer to Txxym in tight on the map 
to kK>k for other faint fuzzies, and then slew again to a 
new exini“galaaic treat. It's .simple, it's geeky, and iPs just 
plain c<x)l. 

Starry Night has the built in ability to talk to several 
kinds of telescopes. 'Ihe telescope available for thi,s 
review was a Meade LX200 12—inc:ti Schmidt-Cassegi^iin, 
acquired new in 1997* Newer or older telescopes may 
have different capabilities or requirements, so inieqiret 
the content of this article appropriately. 

'I’he perfect t:omputer to act as the controller in this 
scenario is, of ctmrse, a fx>itable Mad Any of Apple's thin, 
light, ixjwer-conscious notebooks with a Cs4 processor 
should provide enough hor.sepowcT to handle the myriad 
of calculations that Starry Night must perform eveiy 
second to pinpoint celestial objects, and the light-up 
keyboard of a recent-mcxlel PowerBcHjk is a blessing for 
those typing under tlic pitch black skies th;it make 
astronomy wortliwhile. However, there's one c’aitrh: The 
communications port on the telescope doesn't match any 


of the communications ports on a Mac, or most other 
modern laptops fc}r that mailer, so an inexpensive cable 
has to built in order to get these two devices talking. 

Cable Construction 

At the tele.st:ope's end t>f things, a type of connector 
called an RIL2 is needed. An RJ12 is a connecior nearly 
identical to the connector at the end of a phone cable, 
except insTe;Kl of having ftjur conductors, it has six. A pair 
of Rn2 connectors crimped onto the ends of a common 
phone cable will serve as the primary ware carrying 
signals l^etween the Mac and the telescope. At the Mac's 
end, a USB port is the most appropriate way to conned a 
telesct>pc. This requires an adapter called the Keyspan 
High Speed USB Serial Adapter to turn the Mac's USB port 
into a DB9 serial port. The Keyspan adapter is available at 
http://www.keyspan.com and sells for apj^roximaiely $30. 
A third adapter is required to conned the DB9 on tlie 
Keyspan with the 1(112 coming from the telescope. ‘ITiat 
adapter is called, aj>[>rt?priately, an RJ12 to DB9 achipter, 
and it's available at any local eledronics .supply .sU)re for 
around $2, Be sure to purcha.se the kind that is no! 
preassembled bet:ause t:usU>m wiring will lie required to 
complete the cable. 

Wiring the cable correctly isn't clifficuU, although it 
does require some careful atteniion. Very good 
instnictions, including a table of pin-outs and diagrams 
can l^e found at http://nineplanets.org/meade/cable.htmL 
and a Google search will turn up other pages with 
instructions. Cable construction took about an hour, and 
recjuired a wire cutter, a j>hone crimper to altach the RJ12 
ends to the phone wire, and a fait of manual dexterity and 
patience for dealing with small conductors* 

Under The Night Sky 

Once the cable is built, ptjinting the telescope with 
Starry Night i.s simple. The telescope needs to !>e aligned, 
either polar or alia^:imuth, withoui being connected to 
the Mac, just as it would be aligned normally. Then plug 
each end of the cal)le into its respective port in each 
device. Stait Starry Night, select the Telescope lal) on die 
left side of the window, and press ilie connect button. 
iJtarry Night will di.splay a status message indicating the 
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connettion was succcssfut, and a pair of cuncenlric 
circles representing the telescope's field of view will 
appear on Starry Night s map. Control-click on an object 
in the sky, scroll to the bottom of the po|>-up menu and 
select Slew scope, and die telescope will begin moving lo 
the selected tle.stination. 

I1ie telescope's pointing accuracy will only be as 
gexxi as the initial alignment, so extia care and time spent 
fierfet iing the telescope's orientation is wordiwhile. If the 
teJescojje liappens to get too far off course. Starry Night 
has a second option in the pop-up menu named Sync 
scope, which will synchronize the cxxnputer's field of view 
lepreseniaLion with the telescope's actual pointing 
location. CerUcr a known object in the telescope, coniroh 
click that object on the map, selea Sync scope, and 
evcryiliing is back on track. 


"J'elesctipe control, ^ilong with other feaLures such as 
real’-time sky views, an observing log, detailed object 
information, and the ability to see any object from any 
point in space at any time, make Starry Night and a Mac 
powerful tools for the amateur astronomer. 

By Aaron Adams 

'i\ii 

Aboui The Author 

Aaron Adana a a IAN Admimstralor in Dayton, Ofuo, and a fanner star 0 / 
Appk's "iwhdi" od campm^ who doesn't get te ptfftk^te m amofeur 
QStrmmiy os mdi os he woidd IKe beamse of Ms day job. He con be readied 
m e~mad at aaron@iJorooodbHifs.Jief 
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iL-ciu VCLLH ^i-cei; 


FuHy compatible with Xsan envlrdSMfi^ 

Support for alt SCSt and Fitee-Channel 
devices and llbrafies J, 

Built In VXA-2 or UlO-2 tape 
Client system support tor 

20 years of Baibkup 




One System^ One Function^ One Solid Performer 

5 Minutes From Unpack to First Backup—Literally 


4 

Mac 


Whether you’re responsible for a few deskside systems or the latest 
Hollywood blockbuster, the new bruAPP provides ultra-reliable, easy 
to use disk-to-disk (D2D) or disk-to-disk-to-tape (02D2T) network- 
based backup. 

bruAPP complements TOLtS Group’s BRU Server for Mac OS X and 
BRU LE for Mac OS X data backup and restore software products. 
bruAPP pricing starts at $2,999. 

To learn more about the bruAPP and BRU products for Mac OS X, 
please call 480-505-0488 ext. 252 or visit TO LIS Group on the web 
at www.tolisgroup.com. 
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TLC Banks on HASP Security 





HASP' 

software drm 


HASP...was the 
only Software 
Digital Rights 
Management 
solution we 
would consider... 
incredibly strong 
security, so easy 
to use. AA 


TIC Industnes is the company behind FfexArcade^*^, 
the revolutionary game platform, PowerBall Btiliards™, 
TLC's pool simulation, is quickly becommg an arcade 



Pierre Mabka DIREOGR OF GAME DEVELOPMENT 
Mel Liu SOFTWARE TECHNICIAN 


favorite. When software is this hot it has to be 
protected by the best. To enable safe, secure delivery to 
customers, TLC chose HASP, the world's hardware- 
based software security solution*. 


As TLC's Maloka and Liu know, the HASP Envelope 
offers more layers of protection than any software 
security solution, making it the strongest file wrapping 
technology available. And the user-friendly interface 
makes the solution virtually plug-and-play. This means 
TLC can concentrate on developing great games—and 
leave the security to the security experts, 

nDCBultetinm43l 2004: 



Aladdin 

SECURING THE GLOBAL VILLAGE 





VisitAladdin.com/hasp 
to view HASP white papers, 
an online demo, or to request 
a FREE Developer Evaluation Kit. 

For information about TLC or PoworBalt Billiards, vis 11 tkindcom. 
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